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ABSTRACT 



A communication device (CD) exchanges messages with an 
implantable infusion pump via telemetry such that com- 
mands are supplied thereto and operational information is 
obtained therefrom. The CD is controlled,*at least in t part, by 
a processor IC according to a software program operating 
therein and provides feedback to a user via a visual display, 
an audio alarm, and a vibrational alarm, and allows input 
from the user via a touch sensitive keypad. Certain input 
functions are restricted by password. The visual display 
includes an icon and fixed element display region and a, 
bitmap display region. The fixed element display region 
includes time and date displays, battery and drug level 
displays that decrement, and a moving delivery slate display. 
Various screens allow operational or log information to be 
displayed and/or user entry of commands. Program features 
when disabled are removed from a series of screen options 
that can be scrolled through. 
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AMBULATORY MEDICAL APPARATUS WITH 
HAND HELD COMMUNICATION DEVICE 

RELATED APPLICATIONS 

[0001] This application claims the benefit of prior filed 
U.S. Provisional Patent Application No. 60/177,414; filed 
Jan. 21, 2000, by Ronald J. Lebel, et al., and entitled 
"Medical Apparatus and Metfiod Including an Implantable 
Device and an External Communication Device" The 
entirety of this provisional application is hereby incorpo- 
rated herein by this reference, including appendices filed 
therewith and any references incorporated therein by refer- 
ence, as if set forth in full herein. 

FIELD OF THE DISCLOSURE 

[0002] This invention relates generally to electronically 
controlled ambulatory medical systems that include an 
ambulatory medical device and a hand held microprocessor 
controlled communication device with enhanced user 
friendliness including enhanced display/patient notification 
features, safety features, and/or medical device program- 
ming/communication features. Preferred embodiments 
relate to implantable infusion pumps and external devices 
for communicating therewith. 

BACKGROUND 

[0003] Implantable infusion pumps for dispensing con- 
trolled volumes of a drug (e.g. insulin) have been proposed 
and even attempts at implementation and commercialization 
made. 

[0004] One such pump is the MMT2001 Implantable 
Pump System as sold by Minimed Inc. of Northridge, Calif. 
This device presented the user with the ability to perform 
basic infusion actions such as the delivery of a basal rate, 
delivery of a temporary basal rate, or the delivery of a meal 
bolus. The user was, however, not presented with the ability 
to perform more sophisticated delivery related operations 
that may be desirable for optimum control of blood glucose 
level. When using this system three delivery options exist: 
(1) delivery of a standard but programmable basal rate, (2) 
delivery of a standard basal rate and a meal bolus simulta- 
neously, or (3) delivery of a temporary basal rate either 
immediately or at a programmable start time within a 
specifiable start time. In this system not only could a meal 
bolus and a temporary basal rate not occur at the same time, 
they could not be programmed into the system when the 
other was already programmed but delivery not yet com- 
pleted even though no overlap in delivery between the two. 
amounts might exist. As such the user CQu ld.only.program 
one variable rate into the system at a time, even in the event 
that several variable rates may be desired to follow one 
another. As such, this system is less than optimal with regard 
to user convenience in programming his/her insulin treat-! 
ment. 

[0005] The system also suffered from an external control- 
ler that was large, hard to carry and awkward to use. The 
controller dimensions are 6.0 inches by 3.5 inches by 1.3 
inches with a display that is a small fraction of the size of the 
face of the controller. The controller included a cover plate 
that would close over the display area when not in use and 
would be opened during use. More particularly, during 
programming the cover plate is opened at a ninety-degree 



angle relative to the front of the display to allow viewing of 
the display and to allow positioning of the cover plate 
immediately over the site of the infusion pump so that 
successful telemetry communication may occur. As such the 
system does not supply delivery or system status related 
information to the user accept at the times that the user elects 
to open and turn on his/her controller. 

[0006] The system further suffers from the inability of the 
implantable device to send out unsobcited telemetry mes- 
sages to the controller concerning operational conditions 
within the implantable device. As such, system conditions 
within the implantable device (other than communication 
related failures) are primarily conveyed to the user via an 
auditory alarm that is internal to the implantable device. 

[0007] The system further suffers from the entire opera- 
tional history of the pump being subject to loss as this 
historical data is only held in the controller. 

[0008] The system further suffered from a relatively short 
life for the implantable device of approximately 2.5 years. 

[0009] Based on the above noted shortcomings, and other 
shortcomings of systems in the field, a need exists for 
improved systems that offer enhanced programming capa- 
bilities, enhanced user interface capabilities, reduced con- 
troller size, enhanced operational performance, enhanced 
security of system/patient historical data, enhanced safety 
features, and/or enhanced implantable device life. 

[0010] It is believed that related shortcoming may exist in 
other ambulatory medical devices as well, such as in exter- 
nally carried infusion pumps, implantable pacemakers, 
implantable defibrillators, implantable neural stimulators, 
implantable physiological sensors, externally carried physi- 
ologic sensors, and the like. 

SUMMARY OF THE INVENTION 
[0011] It is a first object of certain aspects of the invention 
to enhance programming capabilities for ambulatory medi- 
cal systems and in particular for implantable infusion pump 
systems. 

[0012] It is a second object of certain aspects of the 
invention to enhance user interface capabilities in ambula- 
tory medical systems and in particular for implantable 
infusion pump systems. 

[0013] It is a third object of certain aspects of the invention 
to reduce system size for patient convenience in ambulatory 
medical systems and in particular for implantable infusion 
pump systems. 

[0014] It is a fourth object of certain aspects of the 
invention to enhance operational performance of ambulatory 
medical systems and in particular for implantable infusion 
pump systems. 

[0015] It is a fifth object of certain aspects of the invention 
to enhance security of system/patient historical data. 

[0016] It is a sixth object of certain aspects of the inven- 
tion to enhance the operational safety of ambulatory medical 
systems and in particular of implantable infusion pump 
systems, 

[0017] It is a seventh object of certain aspects of the 
invention to enhance longevity of ambulatory medical sys- 
tems and in particular of implantable infusion pump sys- 
tems. 
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[0018] Other objects and advantages of various aspects of 
the invention will be apparent to those of skill in the art upon 
review of the teachings herein. The various aspects of the 
invention set forth below as well as other aspects of the 
invention not specifically set forth below but ascertained 
from the teachings found herein, may address the above 
noted objects or other objects ascertained from the teachings 
herein individually or in various combinations. As such, it is 
intended that each aspect of the invention address at least 
one of the above noted objects or address some other object 
that will be apparent to one of skill in the art from a review 
of the teachings herein. It is not intended that all, or even a 
portion of these objects, necessarily be addressed by any 
single aspect of the invention even though that may be the 
case with regard to some aspects. 

[0019] A first aspect of the invention provides a medical 
system that includes (a) an ambulatory medical device (MD) 
that includes MD electronic control circuitry that further 
includes at least one MD telemetry system and at least one 
MD processor that controls, at least in part, operation of the 
MD telemetry system and operation of the medical device, 
wherein the medical device is configured to provide a 
treatment to a body of a patient or to monitor a selected state 
of the body; and (b) a communication device (CD) that 
includes CD electronic control circuitry that further includes 
at least one CD telemetry system and at least one CD 
processor that controls, at least in part, operation of the CD 
telemetry system and operation of the communication 
device, wherein the CD telemetry system sends messages to 
or receives messages from the MD telemetry system, 
wherein the communication device weighs no more than 
about 10 oz and includes a CD housing having a volumetric 
size smaller than 20 cubic inches. 

[0020] A second aspect of the invention provides a medi- 
cal system that includes (a) an ambulatory medical device 
(MD) that includes MD electronic control circuitry that 
further includes at least one MD telemetry system and at 
least one MD processor that controls, at least in part, 
operation of the MD telemetry system and operation of the 
medical device, wherein the medical device is configured to 
provide a treatment to a body of a patient or to monitor a 
selected state of the body; and (b) a communication device 
(CD) that includes CD electronic control circuitry that 
further includes at least one CD telemetry system and at least 
one CD processor that controls, at least in part, operation of 
the CD telemetry system and operation of the communica- 
tion device, wherein the CD telemetry system sends mes- 
sages to or receives messages from the MD telemetry 
system, wherein the communication device additionally 
includes a CD readable display which includes a bit map 
region for displaying selected information. 

[0021] A third aspect of the invention provides a medical 
system that includes (a) an ambulatory medical device (MD) 
that includes MD electronic control circuitry that further 
includes at least one MD telemetry system and at least one 
MD processor that controls, at least in part, operation of the 
MD telemetry system and operation of the medical device, 
wherein the medical device is configured to provide a 
treatment to a body of a patient or to monitor a selected state 
of the body; and (b) a communication device (CD) that 
includes CD electronic control circuitry that further includes 
at least one CD telemetry system and at least one CD 
processor that controls, at least in part, operation of the CD 



telemetry system and operation of the communication 
device, wherein the CD telemetry system sends messages to 
or receives messages from the MD telemetry system 
wherein the communication device additionally includes a 
readable display which includes at least one icon. 

[0022] A fourth aspect of the invention provides a medical 
system that includes (a) an ambulatory medical device (MD) 
that includes MD electronic control circuitry that further 
includes at least one MD telemetry system and at least one 
MD processor that controls, at least in part, operation of the 
MD telemetry system and operation of the medical device, 
wherein the medical device is configured to provide a 
treatment to a body of a patient or to monitor a selected state 
of the body; and (b) a communication device (CD) that 
includes CD electronic control circuitry that further includes 
at least one CD telemetry system and at least one CD 
processor that controls, at least in part, operation of the CD 
telemetry system and operation of the communication 
device, wherein the CD telemetry system sends messages to 
or receives messages from the MD telemetry system 
wherein the communication device additionally includes a 
readable CD display which further includes a backlight. 

[0023] In a specific variation of the fourth aspect of the 
invention the communication device additionally includes a 
touch sensitive CD input device and wherein the backlight 
is automatically activated when one or more selected loca- 
tions on the CD input device are touched. 

[0024] In a specific variation of the fourth aspect of the 
invention the backlight is activated automatically when a 
light level falling on a sensor on the communication device 
is less than a predetermined amount and a touch sensitive 
region of the communication device is touched. 

[0025] A fifth aspect of the invention provides a medical 
system that includes (a) an ambulatory medical device (MD) 
that includes MD electronic control circuitry that further 
includes at least one MD telemetry system and al least one 
MD processor that controls, at least in part, operation of the 
MD telemetry system and operation of the medical device, 
wherein the medical device is configured to provide a 
treatment to a body of a patient or to monitor a selected state 
of the body; and (b) a communication device (CD) that 
includes CD electronic control circuitry that further includes 
at least one CD telemetry system and at least one CD 
processor that controls, at least in part, operation of the CD 
telemetry system and operation of the communication 
device, wherein the CD telemetry system sends messages to 
or receives messages from the MD telemetry system, 
wherein the communication device further includes an auto- 
matically activated CD alarm that is capable of providing a 
signal to the patient of the existence of a particular condition 
in at least one of the medical device or the communication 
device, and wherein the CD alarm includes at least one of a 
CD vibration mechanism or a CD audio alarm mechanism. 

[0026] In a specific variation of the fifth aspect of the 
invention the communication device is configured to enable 
a patient to select between the CD alarm using the audio and 
vibration mechanism. 

[0027] In a specific variation of the fifth aspect of the 
invention an alarm condition in the medical device is 
transmitted to the communication device via an unsolicited 
telemetry message. 
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[0028] In a specific variation of the fifth aspect of the 
invention the communication device is configured to auto- 
matically switch from one of the audio alarm or the vibration 
alarm to the other of the vibration alarm or the audio alarm 
under selected circumstances associated with at least one 
error condition. 

[0029] In a specific variation of the fifth aspect of the 
invention one of the medical device or the communication 
device includes an audio alarm that produces a plurality of 
tones emitted in a predetermined sequence. 

[0030] A sixth aspect of the invention provides a medical 
system that includes (a) an ambulatory medical device (MD) 
that includes MD electronic control circuitry that further 
includes at least one MD telemetry system and at least one 
MD processor that controls, at least in part, operation of the 
MD telemetry system and operation of the medical device, 
wherein the medical device is configured to provide a 
treatment to a body of a patient or to monitor a selected state 
of the body; and (b) a communication device (CD) that 
includes CD electronic control circuitry that further includes 
at least one CD telemetry system and at least one CD 
processor that controls, at least in part, operation of the CD 
telemetry system and operation of the communication 
device, wherein the CD telemetry system sends messages to 
or receives messages from the MD telemetry system 
wherein the communication device additionally includes a 
CD touch sensitive input device, and wherein the commu- 
nication device additionally includes a readable CD display 
which further includes a capability of displaying different 
colors. 

[0031] In a specific variation of the sixth aspect of the 
invention the CD display is configured to display a single 
color at any one time. 

[0032] In a specific variation of the sixth aspect of the 
invention the CD display is configured to display a plurality 
of colors at a single time. 

[0033] A seventh aspect of the invention provides a medi- 
cal system that includes (a) an ambulatory medical device 
(MD) that includes MD electronic control circuitry that 
further includes at least one MD telemetry system and at 
least one MD processor that controls, at least in part, 
operation of the MD telemetry system and operation of the 
medical device, wherein the medical device is configured to 
provide a treatment to a body of a patient or to monitor a 
selected state of the body; and (b) a communication device 
(CD) that includes CD electronic control circuitry that 
further includes at least one CD telemetry system and at least 
one CD processor that controls, at least in part, operation of 
the CD telemetry system and operation of the communica- 
tion device, wherein the CD telemetry system sends mes- 
sages to or receives messages from the MD telemetry 
system, wherein the communication device additionally 
includes a readable display that is also touch sensitive for 
allowing user inputs to be entered into the communication 
device. 

[0034] A eighth aspect of the invention provides a medical 
system that includes (a) an ambulatory medical device (MD) 
that includes MD electronic control circuitry that further 
includes at least one MD telemetry system and at least one 
MD processor that controls, at least in part, operation of the 
MD telemetry system and operation of the medical device, 



wherein the medical device is configured to provide a 
treatment to a body of a patient or to monitor a selected state 
of the body; and (b) a communication device (CD) that 
includes CD electronic control circuitry that further includes 
at least one CD telemetry system and at least one CD 
processor that controls, at least in part, operation of the CD 
telemetry system and operation of the communication 
device, wherein the CD telemetry system sends messages to 
or receives messages from the MD telemetry system, 
wherein the communication device additionally includes a 
CD touch sensitive input device and a CD speaker that is 
controlled to supply speech based output to the patient. 

[0035] A ninth aspect of the invention provides a medical 
system that includes (a) an ambulatory medical device (MD) 
that includes MD electronic control circuitry that further 
includes at least one MD telemetry system and at least one 
MD processor that controls, at least in part, operation of the 
MD telemetry system and operation of the medical device, 
wherein the medical device is configured to provide a 
treatment to a body of a patient or to monitor a selected state 
of the body; and (b) a communication device (CD) that 
includes CD electronic control circuitry that further includes 
at least one CD telemetry system and at least one CD 
processor that controls, at least in part, operation of the CD 
telemetry system and operation of the communication 
device, wherein the CD telemetry system sends messages to 
or receives messages from the MD telemetry system, 
wherein the communication device additionally includes a 
CD input device which further includes a CD microphone 
and a CD voice recognition system that are controlled to 
allow speech based input to the communication device. 

[0036] A tenth aspect of the invention provides a medical 
system that includes (a) an ambulatory medical device (MD) 
that includes MD electronic control circuitry that further 
includes at least one MD telemetry system and at least one 
MD processor that controls, at least in part, operation of the 
MD telemetry system and operation of the medical device, 
wherein the medical device is configured to provide a 
treatment to a body of a patient or to monitor a selected state 
of the body; and (b) a communication device (CD) that 
includes CD electronic control circuitry that further includes 
at least one CD telemetry system and at least one CD 
processor that controls, at least in part, operation of the CD 
telemetry system and operation of the communication 
device, wherein the CD telemetry system sends messages to 
or receives messages from the MD telemetry system 
wherein the communication device additionally includes a 
CD touch sensitive input device, and wherein the commu- 
nication device is configured to perform a plurality of 
functions, and wherein the performance of at least a first 
function requires that the communication device be placed 
in an operational state dictated by a first or a second 
password and the performance of at least a second function 
requires that the communication device be placed in an 
operational state dictated the second password. 

[0037] In a specific variation of the tenth aspect of the 
invention the communication device can perform all func- 
tions with the second password that can be performed with 
the first password. 

[0038] A eleventh aspect of the invention provides a 
medical system that includes (a) an ambulatory medical 
device (MD) that includes MD electronic control circuitry 
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that further includes at least one MD telemetry system and 
at least one MD processor that controls, at least in part, 
operation of the MD telemetry system and operation of the 
medical device, wherein the medical device is configured to 
provide a treatment to a body of a patient or to monitor a 
selected state of the body; and (b) a communication device 
(CD) that includes CD electronic control circuitry that 
further includes at least one CD telemetry system and at least 
one CD processor that controls, at least in part, operation of 
the CD telemetry system and operation of the communica- 
tion device, wherein the CD telemetry system sends mes- 
sages to or receives messages from the MD telemetry 
system, wherein the communication device includes a touch 
sensitive CD input device, and wherein at least one of the 
communication device or the medical device may be reset, 
or placed in a state to allow reset to occur, by contacting a 
plurality of selected locations on the touch sensitive CD 
input device in a prescribed order, 

[0039] In a specific variation of the eleventh aspect of the 
invention password must be entered into the communication 
device prior to touching the plurality of selected locations on 
the touch sensitive CD input device in order for reset to 
occur. 

[0040] In a specific variation of the eleventh aspect of the 
invention a password must be entered into the communica- 
tion device after touching the plurality of selected locations 
on the touch sensitive CD input device in order for reset to 
occur 

[0041] In a specific variation of the eleventh aspect of the 
invention the plurality of touch sensitive locations are 
touched sequentially in order for reset to occur, 

[0042] In a specific variation of the eleventh aspect of the 
invention at least a portion of the plurality of touch sensitive 
locations must be touched simultaneously for reset to occur. 

[0043] In a specific variation of the eleventh aspect of the 
invention at least a portion of the plurality of touch sensitive 
locations must be touched and then untouched in a particular 
order for reset to occur. 

[0044] In a specific variation of the eleventh aspect of the 
invention resetting may occur to different extents depending 
on variations in the plurality of touch sensitive locations 
touched, variations in the sequence of touching, or variations 
in the sequence of untouching, 

[0045] A twelfth aspect of the invention provides a medi- 
cal system that includes (a) an ambulatory medical device 
(MD) that includes MD electronic control circuitry that 
further includes at least one MD telemetry system and at 
least one MD processor that controls, al least in part, 
operation of the MD telemetry system and operation of the 
medical device, wherein the medical device is configured to 
provide a treatment to a body of a patient or to monitor a 
selected state of the body; and (b) a communication device 
(CD) that includes CD electronic control circuitry that 
further includes at least one CD telemetry system and at least 
one CD processor that controls, at least in part, operation of 
the CD telemetry system and operation of the communica- 
tion device, wherein the CD telemetry system sends mes- 
sages to or receives messages from the MD telemetry 
system, wherein the communication device is configured to 
receive status information on an MD battery via telemetry 
from the medical device. 



[0046] In a specific variation of the twelfth aspect of the 
invention the medical device provides a periodic indication 
of the MD battery voltage when the MD battery is experi- 
encing a current load that is closer to the minimum load 
during normal operation of the medical device than a 
maximum load during normal operation. 

[0047] In a specific variation of the twelfth aspect of the 
invention the medical device provides a periodic indication 
of the MD battery voltage when the MD battery is experi- 
encing a current load which is closer to the maximum load 
during normal operation than a minimum load during nor- 
mal operation. 

[0048] In a specific variation of the twelfth aspect of the 
invention MD battery status is provided using both a lower 
current load and a higher current load at least once a week. 

[0049] In a specific variation of the twelfth aspect of the 
invention the communication device provides an auditory, 
visual, or tactile warning when the MD battery is estimated 
to be capable of powering the medical device for less than 
a predetermined additional amount of time, 

[0050] A thirteenth aspect of the invention provides a 
medical system that includes (a) an ambulatory medical 
device (MD) that includes MD electronic control circuitry 
that further includes at least one MD telemetry system and 
at least one MD processor that controls, at least in part, 
operation of the MD telemetry system and operation of the 
medical device, wherein the medical device is configured to 
provide a treatment to a body of a patient or to monitor a 
selected state of the body; and (b) a communication device 
(CD) that includes CD electronic control circuitry that 
further includes at least one CD telemetry system and at least 
one CD processor that controls, at least in part, operation of 
the CD telemetry system and operation of the communica- 
tion device, wherein the CD telemetry system sends mes- 
sages to or receives messages from the MD telemetry 
system, wherein the communication device additionally 
includes at least one battery and the medical device includes 
at least one battery, and wherein the communication device 
is configured to display log data of MD battery status 
information or CD battery status information. 

[0051] In a specific variation of the thirteenth aspect of the 
invention the log information includes a plurality of voltage 
readings taken from a predefined battery when the pre- 
defined battery is powering a first load and when the 
predefined battery is powering a second load which is 
different from the first load. 

[0052] In a specific variation of the thirteenth aspect of the 
invention the log data is accumulated at least once per week. 

[0053] A fourteenth aspect of the invention provides a 
medical system that includes (a) an ambulatory medical 
device (MD) that includes MD electronic control circuitry 
that further includes at least one MD telemetry system and 
at least one MD processor that controls, at least in part, 
operation of the MD telemetry system and operation of the 
medical device, wherein the medical device is configured to 
provide a treatment to a body of a patient or to monitor a 
selected state of the body; and (b) a communication device 
(CD) that includes CD electronic control circuitry that 
further includes at least one CD telemetry system and at least 
one CD processor that controls, at least in part, operation of 
the CD telemetry system and operation of the communica- 
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tion device, wherein the CD telemetry system sends mes- 
sages to or receives messages from the MD telemetry 
system, wherein the communication device additionally 
includes a socket for a removable memory module. 

[0054] In a specific variation of the fourteenth aspect of 
the invention the communication device includes the remov- 
able memory module. 

[0055] In a specific variation of the fourteenth aspect of 
the invention the removal memory module contains replace- 
ment software for the communication device, replacement 
software for the medical device, or calibration data for a 
sensor that forms part of the medical device. 

[0056] A fifteenth aspect of the invention provides a 
medical system that includes (a) an ambulatory medical 
device (MD) that includes MD electronic control circuitry 
that further includes at least one MD telemetry system and 
at least one MD processor that controls, at least in part, 
operation of the MD telemetry system and operation of the 
medical device, wherein the medical device is configured to 
provide a treatment to a body of a patient or to monitor a 
selected state of the body; and (b) a communication device 
(CD) that includes CD electronic control circuitry that 
further includes at least one CD telemetry system and at least 
one CD processor that controls, at least in part, operation of 
the CD telemetry system and operation of the communica- 
tion device, wherein the CD telemetry system sends mes- 
sages to or receives messages from the MD telemetry 
system, wherein the medical device includes an implantable 
device, and wherein the communication device includes a 
memory for simultaneously storing a plurality of parameters 
that are each used during a different time period to, at least 
in part, control the treatment provided to the body or the 
monitoring of the body that is provided by the medical 
device. 

[0057] In a specific variation of the fifteenth aspect of the 
invention the implantable device includes an infusion pump 
that is capable of dispensing a selected quantity of a drug 
according to a programmed parameter, and wherein each of 
the plurality of parameters includes a basal rate parameter 
that is programmed for use in controlling the dispensing of 
the drug during a selected time period during the day. In a 
further variation the plurality of parameters comprise a 
plurality of sets of parameters, wherein each set includes a 
plurality of parameters, wherein the medical device is 
capable of storing only one set at a time, and wherein the 
communication device transmits a selected on of the sets to 
the communication device when it is desired for the param- 
eters of the transmitted set to control, at least in part, the 
dispensing of the drug. 

[0058] A sixteenth aspect of the invention provides a 
medical system that includes (a) an ambulatory medical 
device (MD) that includes MD electronic control circuitry 
that further includes at least one MD telemetry system and 
at least one MD processor that controls, at least in part, 
operation of the MD telemetry system and operation of the 
medical device, wherein the medical device is configured to 
provide a treatment to a body of a patient or to monitor a 
selected state of the body; and (b) a communication device 
(CD) that includes CD electronic control circuitry that 
further includes at least one CD telemetry system and at least 
one CD processor that controls, at least in part, operation of 
the CD telemetry system and operation of the communica- 



tion device, wherein the CD telemetry system sends mes- 
sages to or receives messages from the MD telemetry 
system, wherein the medical system additionally includes a 
second device (SD) that includes an SD communication 
system, wherein the communication device further includes 
a second CD communication system, and wherein the com- 
munication device is programmable so as to echo all CD 
telemetry system messages, sent or received from the medi- 
cal device, through the second CD communication system to 
the SD communication system. 

[0059] A seventeenth aspect of the invention provides a 
medical system that includes (a) an ambulatory medical 
device (MD) that includes MD electronic control circuitry 
that further includes at least one MD telemetry system and 
at least one MD processor that controls, at least in part, 
operation of the MD telemetry system and operation of the 
medical device, wherein the medical device is configured to 
provide a treatment to a body of a patient or to monitor a 
selected state of the body; and (b) a communication device 
(CD) that includes CD electronic control circuitry that 
further includes at least one CD telemetry system and at least 
one CD processor that controls, at least in part, operation of 
the CD telemetry system and operation of the communica- 
tion device, wherein the CD telemetry system sends mes- 
sages to or receives messages from the MD telemetry 
system, wherein the medical system additionally includes a 
second device (SD) that includes an SD communication 
system, wherein the communication device further includes 
a second CD communication system, and wherein the com- 
munication device is programmable to pass messages 
received from the second device on to the medical device via 
transfer from the SD communication system to the second 
CD communication system to the CD telemetry system and 
on to MD telemetry system of the medical device, and/or to 
pass messages received from the medical device to the 
second device via transfer from MD telemetry system to the 
CD telemetry system to the second CD communication 
system and then onto the SD telemetry system of the second 
device, and wherein the content of the messages is passed 
without modification. 

[0060] A eighteenth aspect of the invention provides a . 
medical system that includes (a) an ambulatory medical 
device (MD) that includes MD electronic control circuitry 
that further includes at least one MD telemetry system and 
at least one MD processor that controls, at least in part, 
operation of the MD telemetry system and operation of the 
medical device, wherein the medical device is configured to 
provide a treatment to a body of a patient or to monitor a 
selected stale of the body; and (b) a communication device 
(CD) that includes CD electronic control circuitry that 
further includes at least one CD telemetry system and at least 
one CD processor that controls, at least in part, operation of 
the CD telemetry system and operation of the communica- 
tion device, wherein the CD telemetry system sends mes- 
sages to or receives messages from the MD telemetry 
system, wherein the medical system additionally includes a 
second device (SD) that includes an SD communication 
system, wherein the communication device further includes 
a second CD communication system that is capable of 
sending messages to or receiving messages from the SD 
communication system, and wherein the communication 
device additionally includes a CD keypad, and wherein the 
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communication device is capable of receiving messages 
from the second device that emulate keystrokes on the 
keypad. 

[0061] A nineteenth aspect of the invention provides a 
medical system that includes (a) an ambulatory medical 
device (MD) that includes MD electronic control circuitry 
that further includes at least one MD telemetry system and 
at least one MD processor that controls, at least in part, 
operation of the MD telemetry system and operation of the 
medical device, wherein the medical device is configured to 
provide a treatment to a body of a patient or to monitor a 
selected state of the body; and (b) a communication device 
(CD) that includes CD electronic control circuitry that 
further includes at least one CD telemetry system and at least 
one CD processor that controls, at least in part, operation of 
the CD telemetry system and operation of the communica- 
tion device, wherein the CD telemetry system sends mes- 
sages to or receives messages from the MD telemetry 
system, wherein the communication device is programmed 
to accept input parameters that specify the delivery of a 
predefined quantity of treatment to the body of the patient 
over a prescribed time period wherein the average rate of 
delivery per minute of portions of the predefined quantity 
varies as a function of time according to a preprogrammed 
delivery profile. 

[0062] In a specific variation of the nineteenth aspect of 
the invention the preprogrammed delivery profile results in 
a bell shaped curve of average delivery per minute versus 
time. In a further variation the communication device allows 
the patient to select a most suitable of a plurality of bell 
shaped delivery profiles. In a further variation at least one of 
the curves is symmetric. In still a further variation at least 
one of the curves is non -symmetric with a generally steeper 
upward slope than downward slope. 

[0063] A twentieth aspect of the invention provides a 
medical system that includes (a) an ambulatory medical 
device (MD) that includes MD electronic control circuitry 
that further includes at least one MD telemetry system and 
at least one MD processor that controls, at least in part, 
operation of the MD telemetry system and operation of the 
medical device, wherein the medical device is configured to 
provide a treatment to a body of a patient or to monitor a 
selected state of the body; and (b) a communication device 
(CD) that includes CD electronic control circuitry that 
further includes at least one CD telemetry system and at least 
one CD processor that controls, at least in part, operation of 
the CD telemetry system and operation of the communica- 
tion device, wherein the CD telemetry system sends mes- 
sages to or receives messages from the MD telemetry 
system, wherein the communication device is powered by a 
replaceable battery and wherein sufficient power is stored in 
one or more capacitors within the communication device 
that a controlled power down can occur when the replace- 
able battery is removed such that upon replacement of the 
battery the communication device need not be repro- 
grammed to resume operation. 

[0064] In a specific variation of the twentieth aspect of the 
invention the communication device monitors the voltage on 
the replaceable batter so as to detect a removal of the battery 
and initiate and complete a controlled shut down prior to the 
capacitors losing a required minimum voltage. 

[0065] A twenty-first aspect of the invention provides a 
medical system that includes (a) an ambulatory medical 



device (MD) that includes MD electronic control circuitry 
that further includes at least one MD telemetry system and 
at least one MD processor that controls, at least in part, 
operation of the MD telemetry system and operation of the 
medical device, wherein the medical device is configured to 
provide a treatment to a body of a patient or to monitor a 
selected state of the body; and (b) a communication device 
(CD) that includes CD electronic control circuitry that 
further includes at least one CD telemetry system and at least 
one CD processor that controls, at least in part, operation of 
the CD telemetry system and operation of the communica- 
tion device, wherein the CD telemetry system sends mes- 
sages to or receives messages from the MD telemetry 
system, wherein the medical device is configured to provide 
a drug to the body of a patient in amounts that are integer 
multiples of a quantized amount, wherein the communica- 
tion device is programmed to allow entry of delivery quan- 
tities that are not integral multiples of the quantized amount. 

[0066] A twenty -second aspect of the invention provides a 
medical system that includes (a) an ambulatory medical 
device (MD) that includes MD electronic control circuitry 
that further includes at least one MD telemetry system and 
at least one MD processor that controls, at least in part, 
operation of the MD telemetry system and operation of the 
medical device, wherein the medical device is configured to 
provide a treatment to a body of a patient or to monitor a 
selected state of the body; and (b) a communication device 
(CD) that includes CD electronic control circuitry that 
further includes at least one CD telemetry system and at least 
one CD processor that controls, at least in part, operation of 
the CD telemetry system and operation of the communica- 
tion device, wherein the CD telemetry system sends mes- 
sages to or receives messages from the MD telemetry 
system, wherein the communication device additionally 
includes a CD display device for providing visual commu- 
nication signals to the patient which further includes a 
zoomable display so that the size of displayed images may 
be adjusted to a desired size. 

[0067] In a specific variation of the twenty-second aspect 
of the invention the CD display device includes a LCD bit 
map display. 

[0068] A twenty-third aspect of the invention provides a 
medical system that includes (a) an ambulatory medical 
device (MD) that includes MD electronic control circuitry 
that further includes at least one MD telemetry system and 
at least one MD processor that controls, at least in part, 
operation of the MD telemetry system and operation of the 
medical device, wherein the medical device is configured to 
provide a treatment to a body of a patient or to monitor a 
selected state of the body; and (b) a communication device 
(CD) that includes CD electronic control circuitry that 
further includes at least one CD telemetry system and at least 
one CD processor that controls, at least in part, operation of 
the CD telemetry system and operation of the communica- 
tion device, wherein the CD telemetry system sends mes- 
sages to or receives messages from the MD telemetry 
system, wherein the medical device includes an infusion 
pump, and wherein the CD display device is controlled to 
show a plurality of infusion parameters simultaneously. 

[0069] A twenty-fourth aspect of the invention provides a 
medical system, that includes, (a) an ambulatory medical 
device (MD) that includes MD electronic control circuitry 
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that further includes at least one MD telemetry system and 
at least one MD processor that controls, at least in part, 
operation of the MD telemetry system and operation of the 
medical device, wherein the medical device is configured to 
provide a treatment to a body of a patient or to monitor a 
selected state of the body; and (b) a communication device 
(CD) that includes CD electronic control circuitry that 
further includes at least one CD telemetry system and at least 
one CD processor that controls, at least in part, operation of 
the CD telemetry system and operation of the communica- 
tion device, wherein the CD telemetry system sends mes- 
sages to or receives messages from the MD telemetry 
system, wherein the CD display device includes a moving 
image that graphically depicts a status of the system. 

[0070] In a specific variation of the twenty- fourth aspect 
of the invention the medical device includes an infusion 
pump and the status being depicted includes an indication of 
a delivery status. In a further variation the moving image 
rotates. In a further variation the image includes a number of 
elements that may be active or inactive and differing num- 
bers of active elements indicates different delivery states. 

[0071] A twenty-fifth aspect of the invention provides a 
medical system that includes (a) an ambulatory medical 
device (MD) that includes MD electronic control circuitry 
that further includes at least one MD telemetry system and 
at least one MD processor that controls, at least in part, 
operation of the MD telemetry system and operation of the 
medical device, wherein the medical device is configured to 
provide a treatment to a body of a patient or to monitor a 
selected state of the body; and (b) a communication device 
(CD) that includes CD electronic control circuitry that 
further includes at least one CD telemetry system and at least 
one CD processor that controls, at least in part, operation of 
the CD telemetry system and operation of the communica- 
tion device, wherein the CD telemetry system sends mes- 
sages to or receives messages from the MD telemetry 
system, wherein the communication device includes a CD 
display controlled by the at least one CD processor for 
providing visual feedback to the patient, and wherein the 
feedback includes a display of the quantity of a consumable 
estimated to be remaining in the system. 

[0072] In a specific.variation of the twenty-fifth aspect of 
the invention the consumable is a quantity of a drug esti- 
mated to be remaining in a reservoir. 

[0073] In a specific variation of the twenty-fifth aspect of 
the invention the consumable is either (1) battery power 
remaining in a replaceable CD battery in the communication 
device and a voltage level on the CD battery is graphically 
depicted with a desired resolution, or (2) battery power 
remaining in an MD battery in the medical device and a 
voltage level on the battery is graphically depicted with a 
desired resolution. 

[0074] A twenty-sixth aspect of the invention provides a 
medical system that includes (a) an ambulatory medical 
device (MD) that includes MD electronic control circuitry 
that further includes at least one MD telemetry system and 
at least one MD processor that controls, at least in part, 
operation of the MD telemetry system and operation of the 
medical device, wherein the medical device is configured to 
provide a treatment to a body of a patient or to monitor a 
selected state of the body; and (b) a communication device 
(CD) that includes CD electronic control circuitry that 



further includes at least one CD telemetry system and at least 
one CD processor that controls, at least in part, operation of 
the CD telemetry system and operation of the communica- 
tion device, wherein the CD telemetry system sends mes- 
sages to or receives messages from the MD telemetry 
system, wherein the CD display is controlled to depict a 
plurality of patient programmable options and wherein at 
least one of the patient programmable options may be 
enabled or disabled such that when disabled the at least one 
patient programmable option is no longer displayed as an 
option. 

[0075] A twenty-seventh aspect of the invention provides 
a medical system that includes (a) an ambulatory medical 
device (MD) that includes MD electronic control circuitry 
that further includes at least one MD telemetry system and 
at least one MD processor that controls, at least in part, 
operation of the MD telemetry system and operation of the 
medical device, wherein the medical device is configured to 
provide a treatment to a body of a patient or to monitor a 
selected state of the body; and (b) a communication device 
(CD) that includes CD electronic control circuitry that 
further includes at least one CD telemetry system and at least 
one CD processor that controls, at least in part, operation of 
the CD telemetry system and operation of the communica- 
tion device, wherein the CD telemetry system sends mes- 
sages to or receives messages from the MD telemetry 
system, wherein the medical device or the communication 
device monitors battery voltage and generates a voltage log, 
wherein the medical device monitors a CD voltage of a CD 
battery in the communication device and generates a CD 
voltage log. 

[0076] In a specific variation of the twenty-seventh aspect 
of the invention the log includes a plurality of CD voltage 
values for each of a plurality of different current drain states. 
[(►077] A twenty -eighth aspect of the invention provides a 
medical system that includes (a) an ambulatory medical 
device (MD) that includes MD electronic control circuitry 
that further includes at least one MD telemetry system and 
at least one MD processor that controls, at least in part, 
operation of the MD telemetry system and operation of the 
medical device, wherein the medical device is configured to 
provide a treatment to a body of a patient or to monitor a 
selected state of the body; and (b) a communication device 
(CD) that includes CD electronic control circuitry that 
further includes at least one CD telemetry system and at least 
one CD processor that controls, at least in part, operation of 
the CD telemetry system and operation of the communica- 
tion device, wherein the CD telemetry system sends mes- 
sages to or receives messages from the MD telemetry 
system, wherein both the medical device and the commu- 
nication device have memories for storing selected data 
about system operation, wherein at least a portion of the 
selected data is duplicated in the medical device and the 
communication device. 

[0078] In a specific variation of the twenty-eighth aspect 
of the invention the communication device is programmed 
to periodically synchronize the duplicated data. 
[0079] In a specific variation of the twenty-eighth aspect 
of the invention at least a portion of the selected data is 
synchronized automatically or is synchronized in response 
to a synchronization command. 

[0080] A twenty-ninth aspect of the invention provides a 
medical system that includes (a) an ambulatory medical 
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device (MD) that includes MD electronic control circuitry 
that further includes at least one MD telemetry system and 
at least one MD processor that controls, at least in part, 
operation of the MD telemetry system and operation of the 
medical device, wherein the medical device is configured to 
provide a treatment to a body of a patient or to monitor a 
selected state of the body; and (b) a communication device 
(CD) that includes CD electronic control circuitry that 
further includes at least one CD telemetry system and at least 
one CD processor that controls, at least in part, operation of 
the CD telemetry system and operation of the communica- 
tion device, wherein the CD telemetry system sends mes- 
sages to or receives messages from the MD telemetry 
system, wherein the communication device is programmed 
to allow a user to set a plurality of parameters to predefined 
default values by issuing a command that does require 
specification of any of the default values. 

[0081] A thirtieth aspect of the invention provides a medi- 
cal system that includes (a) an ambulatory medical device 
(MD) that includes MD electronic control circuitry that 
further includes at least one MD telemetry system and at 
least one MD processor that controls, at least in part, 
operation of the MD telemetry system and operation of the 
medical device, wherein the medical device is configured to 
provide a treatment to a body of a patient or to monitor a 
selected state of the body; and (b) a communication device 
(CD) that includes CD electronic control circuitry that 
further includes at least one CD telemetry system and at least 
one CD processor that controls, at least in part, operation of 
the CD telemetry system and operation of the communica- 
tion device, wherein the CD telemetry system sends mes- 
sages to or receives messages from the MD telemetry 
system, wherein the communication device is capable of 
performing a test of battery voltage with a load on the 
battery. 

[0082] In a specific variation of the thirtieth aspect of the 
invention the test of battery voltage is performed automati- 
cally and periodically. In a further variation at least one of 
the following will occur, (1) the battery voltage is also 
automatically and periodically checked with the battery 
under a minimal load, (2) at least one selected electrical 
component is forced on to produce the load for testing, or (3) 
the test is made to occur at least in part when at least one 
selected electrical component is powered on in the perfor- 
mance of its normal operation, wherein the. electrical com- 
ponent provides a load for the testing. 

[0083] A thirty-first aspect of the invention provides a 
medical system that includes (a) an ambulatory medical 
device (MD) that includes MD electronic control circuitry 
that further includes at least one MD telemetry system and 
at least one MD processor that controls, at least in part, 
operation of the MD telemetry system and operation of the 
medical device, wherein the medical device is configured to 
provide a treatment to a body of a patient or to monitor a 
selected state of the body; and (b) a communication device 
(CD) that includes CD electronic control circuitry that 
further includes at least one CD telemetry system and at least 
one CD processor that controls, at least in part, operation of 
the CD telemetry system and operation of the communica- 
tion device, wherein the CD telemetry system sends mes- 
sages to or receives messages from the MD telemetry 
system, wherein at least one of the medical device or 



communication device has a memory for storing at least one 
calibration factor needed for proper operation of the system. 

[0084] In a specific variation of the thirty-first aspect of 
the invention the medical device includes an infusion pump 
mechanism for dispensing a drug held in a reservoir within 
the medical device and the at least one calibration factor 
includes at least one of (1) information about the concen- 
tration of the drug, (2) delivery volume per discrete opera- 
tion of an infusion pump mechanism, (3) the amount of drug 
placed in the reservoir when filled, (4) a voltage value 
necessary to cause the pump mechanism to operate properly, 
(5) a value to be used by a pulse stealer circuit, (6) a 
calibration factor to be used by an analog to digital con- 
verter, or (7) a specific telemetry ID of the device. 

[0085] A thirty-second aspect of the invention provides a 
medical system that includes (a) an ambulatory medical 
device (MD) that includes MD electronic control circuitry 
that further includes at least one MD telemetry system and 
at least one MD processor that controls, at least in part, 
operation of the MD telemetry system and operation of the 
medical device, wherein the medical device is configured to 
provide a treatment to a body of a patient or to monitor a 
selected state of the body; and (b) a communication device 
(CD) that includes CD electronic control circuitry that 
further includes at least one CD telemetry system and at least 
one CD processor that controls, at least in part, operation of 
the CD telemetry system and operation of the communica- 
tion device, wherein the CD telemetry system sends mes- 
sages to or receives messages from the MD telemetry 
system, wherein at least one of the medical device or 
communication device includes a first component or module 
that may be powered directly by a battery when the battery's 
output voltage is above a predetermined level, and wherein' 
the at least on of the medical device or communication 
device includes a voltage up converter that is used to supply 
electrical potential to the first component or module when 
the battery voltage is below the predetermined level. 

[0086] A thirty-third aspect of the invention provides a 
medical system that includes (a) an ambulatory medical 
device (MD) that includes MD electronic control circuitry 
that further includes at least one MD telemetry system and 
at least one MD processor that controls, at least in part, 
operation of the MD telemetry system and operation of the 
medical device, wherein the medical device is configured to 
provide a treatment to a body of a patient or to monitor a 
selected state of the body; and (b) a communication device 
(CD) that includes CD electronic control circuitry that 
further includes at least one CD telemetry system and at least 
one CD processor that controls, at least in part, operation of 
the CD telemetry system and operation of the communica- 
tion device, wherein the CD telemetry system sends mes- 
sages to or receives messages from the MD telemetry 
system, wherein at least one watchdog circuit is capable of 
causing the CD processor to undergo a predefined process in 
the event that the watchdog circuit does not receive a first 
signal and a second signal, which is different from the first 
signal, within a predefined time period. 

[0087] In a specific variation of the thirty-third aspect of 
the invention the predefined process causes the CD proces- 
sor to be reset. In a further variation one of the first or second 
signals is a signal generated by mainline software. In a 
further variation the other of the first or second signals is a 
signal generated by interrupt hardware. 
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[0088] A thirty-fourth aspect of the invention provides a 
medical system that includes (a) an ambulatory medical 
device (MD) that includes MD electronic control circuitry 
that further includes at least one MD telemetry system and 
at least one MD processor that controls, at least in part, 
operation of the MD telemetry system and operation of the 
medical device, wherein the medical device is configured to 
provide a treatment to a body of a patient or to monitor a 
selected state of the body; and (b) a communication device 
(CD) that includes CD electronic control circuitry that 
further includes at least one CD telemetry system and at least 
one CD processor that controls, at least in part, operation of 
the CD telemetry system and operation of the communica- 
tion device, wherein the CD telemetry system sends mes- 
sages to or receives messages from the MD telemetry 
system, wherein an antenna for the MD telemetry system is 
mounted on a hybrid circuit board in the medical device and 
wherein the antenna for the CD telemetry system is mounted 
on a hybrid circuit board in the communication device. 

[0089] A thirty-fifth aspect of the invention provides a 
medical system that includes (a) an ambulatory medical 
device (MD) that includes MD electronic control circuitry 
that further includes at least one MD telemetry system and 
at least one MD processor that controls, at least in part, 
operation of the MD telemetry system and operation of the 
medical device, wherein the medical device is configured to 
provide a treatment to a body of a patient or to monitor a 
selected state of the body; and (b) a communication device 
(CD) that includes CD electronic control circuitry that 
further includes at least one CD telemetry system and at least 
one CD processor that controls, at least in part, operation of 
the CD telemetry system and operation of the communica- 
tion device, wherein the CD telemetry system sends mes- 
sages to or receives messages from the MD telemetry 
system, wherein the communication device monitors elec- 
trical activity of at least one electronic module or component 
located within the communication device and compares the 
electrical activity to at least one predetermined value. 

[0090] In a specific variation of the thirty-fifth aspect of 
the invention, there will be one of the following, (1) the at 
least one electronic module is located within an application 
specific integrated circuit that includes the CD processor, (2) 
the at least one electronic module includes a crystal oscil- 
lator circuit, (3) the at least one electronic module includes 
a driver for the treatment or monitoring device, (4) the 
predetermined value includes an upper and lower limit of a 
range of values, or (5) the -electrical activity includes a 
current flow. 

[0091] Additional specific variations, provide the medical 
devices of each of the above aspects and above noted 
variations as implantable devices such as implantable infu- 
sion pumps, implantable physiological sensors, implantable 
stimulators, and the like, or external devices such subcuta- 
neous delivery infusion pumps or sensors that ascertain a 
physiological parameter or parameters from subcutaneous 
tissue or from the skin of the patient. Such infusion pumps 
may dispense insulin, analgesics, neurological drugs, drugs 
for treating aids, drugs for treating chronic ailments or acute 
ailments. Sensors may be used to detect various physiologi- 
cal parameters such as hormone levels, insulin, pH, oxygen, 
other blood chemical constituent levels, and the like. The 
sensor may be of the electrochemical type, optical type, and 
may or may not be enzymatic in operation. 



[0092] In even further variations of the above noted 
aspects, and above noted variations, one or more of the 
following is provided: (1) a first portion of the MD telemetry 
system is incorporated into the MD processor and a second 
portion of the MD telemetry system is external to the MD 
processor, (2) a first portion of the CD telemetry system is 
incorporated into the CD processor and a second portion of 
the CD telemetry system is external to the CD processor, (3) 
the MD processor includes an MD central processing unit 
and at least one other MD functional module, (4) the CD 
processor includes a CD central processing unit and at least 
one other CD functional module, (5) the MD electronic 
control circuitry includes at least one external MD func- 
tional module, other than a portion of the MD telemetry 
system, that is external to the MD processor, or (6) the CD 
electronic control circuitry includes at least one external CD 
functional module, other than a portion of the CD telemetry 
system, that is external to the CD processor. 

[0093] Still additional aspects of the invention set forth 
method counterparts to the above system aspects as well as 
to other functional associations and relationships, and pro- 
cesses that have not been specifically set forth above but will 
be understood by those of skill in the art from a review of 
the teachings provided herein. 

[0094] Further aspects of the invention will be understood 
by those of skill in the art upon reviewing the teachings 
herein. These other aspects of the invention may provide 
various combinations of the aspects presented above as well 
as provide other configurations, structures, functional rela- 
tionships, and processes that have not been specifically set 
forth above. 

BRIEF DESCRIPTION OF THE DRAWINGS 

[0095] The above referred to objects and aspects of the 
present invention will be further understood from a review 
of the description to follow, the drawings, and the claims set 
forth hereafter, wherein: 

[0096] FIG. la depicts a perspective view of the main 
body of the implantable device of the first preferred embodi- 
ment; 

[0097] FIG. 16 depicts a perspective view of the support 
and catheter assembly that attaches to the main body of the 
implantable device of the first preferred embodiment; 

[0098] FIG. 2 depicts a perspective view of the external 
communication device of the first preferred embodiment; 
and 

[0099] FIG. 3 depicts a block diagram of the main com- 
ponents/modules of both the implantable device and the 
external communication device of the first preferred 
embodiment. 

[0100] FIGS. 4a and 4b depict a block diagram of the 
main components/modules and their inter-connections as 
used in the external communication device of the first 
preferred embodiment; 

[0101] FIG. 5 depicts the display screen of the external 
communication device of the first preferred embodiment; 

[0102] FIG. 6 depicts a block diagram of the various 
modules of the processor IC used in both the implantable 
device and the external communication device of the first 
preferred embodiment; 
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[0103] FIGS, la and lb depicts the main menu structure 
for the user interface of the external communication device 
of the first preferred embodiment; 

[0104] FIGS. Ha and 8b depicts the setup menu structure 
for the user interface of the external communication device 
of the first preferred embodiment; 

[0105] FIGS. 9a and 9b depicts the setup ii menu structure 
for the user interface of the external communication device 
of the first preferred embodiment; 

[0106] FIGS. U)a and 10b depicts the supervisor menu 
structure for the user interface of the external communica- 
tion device of the first preferred embodiment; 

[0107] FIG. 11 depicts the bolus delivery sequence or 
menu structure for the user interface of the external com- 
munication device of the first preferred embodiment; and 

[0108] FIG. 12 depicts the communication sequence asso- 
ciated with the user interface of the external communication 
device of the first preferred embodiment. 

DETAILED DESCRIPTION OF PREFERRED 
EMBODIMENTS 

[0109] Various details about the structural and functional 
configuration and operation of preferred ambulatory medical 
devices and preferred communication devices are found in 
several U.S. patent applications filed concurrently herewith 
and incorporated herein by reference in their entireties: (1) 
Docket No. USP-1075-A, (2) Docket No. USP-1076-A, (3) 
Docket No. USP-1077-A, (4) Docket No. USP-1079-A, and 
(5) Docket No. USP-1080-A. 

[0110] U.S. patent application Ser. No. To Be Determined, 
filed on Jan. 22, 2001 (concurrently herewith), by Stark- 
weather, et al., entitled "Ambulatory Medical Apparatus and 
Method Having Telemetry Modifiable Control Software", 
corresponding to Medical Research Group, Inc. Docket No. 
USP-1075-A, is hereby incorporated herein by this reference 
as if set forth in full herein. This application provides 
teachings concerning an implantable medical device (e.g. 
infusion pump) and handheld communication device 
wherein the implantable device is capable of operating under 
control of different software programs, wherein a first pro- 
gram operates after resetting the implantable device and is 
not capable of allowing significant medical functionality but 
is capable of selected telemetry operations including telem- 
etry operations that allow replacement software to be down- 
loaded, and wherein a second program may be caused to 
take control of the device and enables medical functionality 
and selected telemetry operations but is incapable of receiv- 
ing replacement software. It is also taught that a software 
image may be received in multiple messages where each 
message is provided with its own validation code and 
wherein a validation code for the whole image is provided 
and wherein each provided validation code must compared 
to a derived validation code prior to accepting the validity of 
the replacement software. 

[0111] U.S. patent application Ser. No. To Be Determined, 
filed on Jan. 22, 2001 (concurrently herewith), by Lebel, et 
al., entitled "Ambulatory Medical Apparatus and Method 
Using a Robust Communication Protocol", corresponding to 
Medical Research Group, Inc. Docket No. USP-1076-A, is 
hereby incorporated herein by the references as if set forth 



in full herein. An implanted medical device (e.g. infusion 
pump) and external device communicate with one another 
via telemetry wherein messages are transmitted under a 
robust communication protocol. The communication proto- 
col gives enhanced assurance concerning the integrity of 
messages that impact medical operations of the implantable 
device. Messages are transmitted using a multipart format 
that includes a preamble, a frame sync, a telemetry ID, data, 
and a validation code. The data portion of the message 
includes an op-code that dictates various other elements that 
form part of the message. The data portion may also include 
additional elements such as sequence numbers, bolus num- 
bers, and duplicate data elements. A telemetry ID for the 
transmitting device may be implicitly embedded in the 
message as part of the validation code that is sent with the 
message and that must be pre-known by the receiver to 
confirm the integrity of the received message. 

[0112] U.S. patent application Ser. No. To Be Determined, 
filed on Jan. 22, 2001 (concurrently herewith), by Bowman, 
et al., entitled "Ambulatory Medical Apparatus and Method 
using a Telemetry System with Predefined Reception listen- 
ing Periods", corresponding to Medical Research Group, 
Inc. Docket No. USP-1077-A, is hereby incorporated herein 
by the reference as if set forth in full herein. This application 
provides teachings concerning an implantable medical 
device (e.g. infusion pump) and an external device that 
communicate with one another via telemetry messages that 
are receivable only during listening windows. Each listening 
window is open for a prescribed listening period and is 
spaced from other listening windows by an interval. The 
listening period is typically kept small to minimize power 
consumption. To increase likelihood of successful commu- 
nication, the window may be forced to an open state, by use 
of an attention signal, in anticipation of an incoming mes- 
sage. To further minimize power consumption, it is desirable 
to minimize use of extended attention signals, and this is 
accomplished by the transmitter maintaining an estimate of 
prescribed listening start times and attempting to send 
messages only during listening periods. In the communica- 
tion device, the estimate is updated as a result of information 
obtained with the reception of each message from the 
medical device. 

[0113] U.S. patent application Ser. No. To Be Determined, 
filed on Jan, 22, 2001 (concurrently herewith), by Stark- 
weather, et al., entitled "Method and Apparatus for Com- 
municating Between an Ambulatory Medical Device and 
Control Device Via Telemetry Using Randomized Data", 
corresponding to Medical Research Group, Inc. Docket No. 
USP-1079-A, is hereby incorporated herein by this reference 
as if set forth in full herein. This application provides 
teachings concerning an implantable medical device (e.g. 
infusion pump) and handheld communication device that 
communicate with one another via telemetry wherein trans- 
mitted messages have enhanced numbers of and/or regular- 
ity of bit transitions to minimize the risk of synchronization 
loss between transmitted bits of data and received bits of 
data. It is taught that bit transitions for portions of messages 
may be enhanced by applying a pseudo-randomization 
scheme to those portions of messages that are transmitted in 
a way that allows the receiver to extract the original data 
from the received randomized data. Preferred randomization 
techniques modify (i.e. randomize) the data using a CRC 
value that is being accumulated while simultaneously caus- 
ing the modified data to modify subsequent accumulation of 
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the CRC itself. Upon reception, the reversal of data ran- 
domization is then made to occur so that the intended 
message is appropriately received; 

[0114] U.S. patent application Ser. No. To Be Determined, 
filed on Jan. 22, 2001 (concurrently herewith), by Lebel, et 
al., entitled "Microprocessor Controlled Ambulatory Medi- 
cal Apparatus with Hand Held Communication Device", 
corresponding to Medical Research Group, Inc. Docket No. 
USP- 1080-A, is hereby incorporated herein by this reference 
as if set forth in full herein. This application provides 
teachings concerning an implantable medical device (e.g. 
infusion pump) and handheld communication device 
wherein an implantable infusion pump possesses operational 
functionality that is, at least in part, controlled by software 
operating in two processor ICs which are configured to 
perform some different and some duplicate functions. The 
pump exchanges messages with the external communication 
device via telemetry. Each processor controls a different part 
of the drug infusion mechanism such that both processors 
must agree on the appropriateness of drug delivery for 
infusion to occur. Delivery accumulators are incremented 
and decremented with delivery requests and with deliveries 
made. When accumulated amounts reach or exceed, quan- 
tized deliverable amounts, infusion is made to occur. The 
accumulators are capable of being incremented by two or 
more independent types of delivery requests. Operational 
modes of the infusion device are changed automatically in 
view of various system errors that are trapped, various 
system alarm conditions that are detected, and when excess 
periods of time lapse between pump and external device 
interactions. 

[0115] The first embodiment of the present invention 
provides a long term implantable medical delivery system 
that controllably supplies insulin to the body of a patient 
afflicted with diabetes mellitus. This embodiment includes 
an implantable medical device and an external communica- 
tion device. In the most preferred embodiments, the com- 
munication device is a hand held device that is used directly 
by the patient to interact with the medical device as opposed 
to being limited to use by a physician, nurse, or technician. 
It is preferred that the communication device provide (1 ) the 
ability to send commands to the medical device, (2) receive 
information from the medical device, and (3) be able to 
present to the patient at least a portion of the information it 
receives from the medical device. In preferred embodiments, 
the patient interacts with the medical device via the com- 
munication device at least once per week, on average, more 
preferably at least once every other day, on average, and 
most preferably at least once per day, on average. 

[0116] The implantable medical device (MD) includes a 
biocompatible housing; a reservoir within the housing for 
holding a quantity of insulin; a side port that attaches to the 
side of the housing, a catheter, that connects to the side port; 
a pumping mechanism, within the housing for moving the 
insulin from the reservoir through the sideport and through 
the catheter to the body of the patient; and control, moni- 
toring, and communication electronics located within the 
housing. In alternative embodiments various portions of 
implantable medical device hardware may be located out- 
side the housing. For example, the pumping mechanism or 
a telemetry antenna may be located within the sideport or 



other side mounted housing; or a telemetry antenna may 
mounted on the outside surface of the housing, or extend 
along the catheter 

[0117] The external communication device (CD) commu- 
nicates commands to the medical device, receives informa- 
tion from the medical device, and communicates system 
status and system history to the patient. The external com- 
munication device includes a housing; a keypad mounted on 
the housing; a display forming part of the housing; and 
control, monitoring, and communication electronics located 
within the housing. In alternative embodiments, the keypad 
may be replaced in whole or in part by a touch sensitive 
display or a voice recognition system. In addition, or alter- 
natively, the display may be replaced in whole or in part by 
a speech generation system or other audio communication 
system. 

[0118] The outer appearance of the implantable device 2 is 
depicted in two pieces in FIGS, la and lb and includes 
housing 6 having a drug outlet port 8, and a refill port 12, a 
removable sideport 14 that mounts against the side of the 
housing 6 over outlet port 8, and a catheter 16 having a distal 
end 18 and a proximal end that attaches to sideport 14. In 
alternative embodiments, the implantable device may take 
on a different shape and/or the sideport may be removed in 
favor of a permanently mounted catheter assembly. 

[0119] The outer appearance of the external communica- 
tion device 32 is depicted in FIG. 2. The various compo- 
nents of the external communication device are fitted in or 
on housing 34. Housing 34 is divided into a front portion 34a 
and a back portion 346. The front portion 34a is provided 
with an opening in which an LCD panel 36 is positioned. 
The panel 36 has a lower portion that is a bit map display and 
an upper portion that provides icons and fixed element 
redisplays. The front portion 34a of the external communica-n 
Mion device is also provided with a five-element. keypad 38. J 
A first key 38a is not located under a raised pad and does not 
provide tactile feedback when it is touched and may be used 
for special functions. The remaining fourjcej^^^,.38.c,.i8^^ 
and 38e have raised pads that provide tactile Yeedrja^lcwHen 
they are depressed. These remaining keys may be used in 
normal device operation and are known as the select key, the 
up arrow key, down arrow key, and the activate key, respec- 
tively. The back portion 34b of the housing is fitted with a 
door under which a compartment is located for holding a 
replaceable battery. 

[0120] The implantable device includes a memory for 
storing program code and data. A portion of the^memory in 
the implantable device is preferably used to store contigu- 
ration information for the external communication device 
and for the implantable device itself. This allows the con- 
figuration data to be reloaded into a replacement external 
communication device if the original should be lost or 
damaged. This memojYJs also used to store system opera- H 
tion inform atiorTin thej^rgj af jcjjvity lo gs and" counters ^ j 
such an insulin delivery log. Various portions oFlhe contents 
of implantable device meniory, j irc downloaded to the ex ter- 
nal communicat ion devi ce periodically . The downloads to 
the external communication device may occur majiually, 
automatically, or semi-automatically. 

[0121] The implantable device control electronics include 
various self -checking mechanisms to ensure that reliable 
operation of the system occurs. For example, as the pumping 
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mechanism in this first embodiment requires a firing voltage 
that is significantly greater than the supply voltage, a prc-firc 
voltage on the pump firing circuit is checked to ensure it is 
large enough to cause the pump to execute a full stroke. 
After firing, the voltage is checked again, to ensure that 
discharging of the circuit occurred. Each processor is moni- 
tored by a watchdog circuit that must be serviced, periodi- 
cally. As implemented in the software, servicing must occur 
at both the interrupt level and at the mainline code level to 
ensure that the processor has not malfunctioned at either 
level. Insulin delivery calculations are performed by both 
processors in such a manner that both processors must agree 
on the quantity and timing of insulin delivery. If an error of 
a significant nature is found in the system, the implantable 
device may be placed in a protective mode (i.e. suspend 
mode or stop mode) where insulin delivery is cut back to a 
medically insignificant rate (e.g. about 1 pump stroke per 
hour) or stopped completely. It is preferred to have a small 
amount of insulin be delivered periodically to help prevent 
the occurrence of catheter blockage. In any event, if system 
failure does occur the system effectively stops delivery and 
attempts to warn the patient. 

[0122] As the implantable device is controlled by mes- 
sages that it receives from the external communication 
device, messages sent to the implantable device have their 
accuracy and appropriateness checked with varying degrees 
of scrutiny depending on the critically of the message. 

[0123] First, for example, all most all messages are sent 
from a particular external communication device to a par- 
ticular implantable device using explicit identification infor- 
mation of the receiver to identify itself as the intended 
recipient. It is considered desirable to use identification 
information with messages that relate to medical treatment 
(e.g. the changing of insulin infusion rates). More particu- 
larly it is desirable to use identification information with 
messages that relate to changing medical treatment in a way 
that could have acute ramifications (e.g. to over supplying a 
drug such as insulin as opposed to under supplying the 
drug). 

[0124] Second, the identity of the sender is preferably 
embedded implicitly in the message. This implicit embed- 
ding occurs by using the identification information of the 
sender in calculating a cyclical redunancy code (CRC) that 
is sent with the message. As such, the implantable device 
must know the identity of the sender in order to successfully 
check the content of the message against the transmitted 
CRC. 

[0125] Third, the values of the data in the message are 
compared to an operation code (Op Code) sent with the 
message to ensure that the code and data are compatible. 
This Op Code is also used to set the size of the most 
messages, thereby providing a mechanism to increase elec- 
trical efficiency of the system by providing a way to limit 
reception time to only that amount necessary to receive a 
particular message. 

[0126] Fourth, if the message pertains to drug delivery, the 
message is sent with redundant data that must match for the 
message to be interpreted as valid. If for any reason the 
message is interpreted as invalid, the message is ignored. 

[0127] To avoid problems associated with long transmis- 
sions that may otherwise contain long strings of non- 



transitioning data (i.e. long strings of 1 s or 0 s), the data 
portion of most messages arc randomized prior to transmis- 
sion and de-randomized upon receipt. For energy savings 
and time savings, randomization and de-randomization pref- 
erably occur in a single pass through the data and preferably 
utilize the semi-random attributes of the CRC tables from 
which CRC codes are built. 

[0128] In the event that an error or other significant event 
occurs in the implantable device, the device may attempt to 
inform the patient of the event by sending a telemetry 
message to the external communication device or alterna- 
tively by activating an audio alarm mechanism within the 
implantable device itself. 

[0129] The implantable device is preferably configured so 
that the software running in it can be replaced or upgraded 
if the need should arise. The software may be downloaded 
into the implantable device through telemetry. The implant- 
able device may be operated under two types of software: (1) 
bootloader code, or (2) application code. The bootloader 
code may be broken down into first stage boot loader code 
which is stored in the ROM that is internal to the ASIC and 
second stage bootloader code that is stored in a SEEPROM 
or other non-volatile memory associated with each ASIC. 
The bootloader code and application code are different for 
each ASIC. 

[0130] The bootloader code does not care about the appli- 
cation in which the implantable device may be used. The 
bootloader code is not concerned with whether, the implant- 
able device is an infusion device, a sensor, a stimulator, or 
the like, or a combination thereof. On the other hand, the 
application code is concerned with the medical functionality 
of the device and thus is designed specifically for a given 
type of application. As such, if an implantable device 
includes a pump and was initially configured (i.e. loaded 
with specific application software) to work with one drug 
(e.g. insulin) in one manner (e.g. allowing different prepro- 
grammed basal rate changes to occur at the beginning of 
each half hour of the day and allowing simultaneous use of 
an immediate bolus and an extended bolus), it could be 
reconfigured to operate in a completely different manner 
while using the same drug or a different drug by simply 
changing its application code. The replacement of applica- 
tion code in this context is different from a mere change in 
program variables that may allow various control limits to 
be changed or even to allow the code to execute different 
algorithms that are preexistant within the code. The replace- 
ment of application code in this context involves the replace- 
ment of at least portions of the code that set forth program 
algorithms. 

[0131] When operating under control of the bootloader 
code, the implantable device allows certain telemetry opera- 
tions to occur and also allows downloading of new appli- 
cation code, but does not allow any drug delivery. The 
application code when controlling the system, on the other 
hand, knows how to handle drug delivery but is not capable 
of downloading new code, or otherwise modifying itself 
(other than to accept changes in parameter values). The 
bootloader code is also designed and operated in such a way 
that new bootloader code can be downloaded to the 
SEEPROM if an upgrade is felt to be appropriate. 

[0132] In alternative embodiments, it is possible to merge 
the functionality of the second stage bootloader code and the 
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application code into a single piece of code that can be 
upgraded as desired. In still further embodiments, it may be 
possible only to upgrade the application code and not the 
second stage bootloader code. 

[0133] As noted above, the implantable device assembly 
includes a detachable catheter and sideport that provides a 
pathway for the insulin to a desired infusion location in the 
patient's body (e.g. into the patient's peritoneal cavity). The 
sideport allows for non -surgical diagnosis of a catheter 
blockage by using pressure. The sideport allows introduc- 
tion of a refill needle and small syringe to clear an obstructed 
catheter (e.g. using up to 110 psi of pressure). The sideport 
also allows the introduction of a refill needle and a pipet to 
verify pump stroking. The catheter includes a check valve 
that seals (e.g. at between 0,5 to 3 psid) and provides a 
redundant valve outside the pump to prevent medication or 
body fluids from back flowing into the implantable device 
reservoir. The sideport in conjunction with the check valve 
facilitates rinsing the fluid path within the implanted device 
with sodium hydroxide, or other functionally similar mate- 
rial, by allowing effluent to be drawn out the sideport rather 
than pumped out the catheter tip. In alternative embodi- 
ments, a sideport may not be used. 

[0134] As noted above, the external communication 
device has both an audio alarm and a vibrator for alerting the 
patient or user of warnings and alarm conditions. The user 
has some control over the selection of audio alarm or 
vibration while the system can automatically switch from 
vibration to audio if the vibrational alarm is not responded 
to in a timely manner. The audio alarm is programmable to 
emit at different frequencies, at different volume levels, for 
different durations, and with different repetition patterns. 
These various alternatives are used to signal different con- 
ditions. The vibratory alarm is also programmable to go off 
for different durations and with differing repetition patterns. 
In alternative embodiments, only one type of alarm may be 
used and it may be used with or without different frequen- 
cies, volumes, durations, or loudnesses, 

[0135] The software controlling the external communica- 
tion device is permanently stored within the external com- 
munication device using a non-volatile memory such as a 
serial electrically erasable programmable read only memory 
(SEEPROM) and is transferred to random access memroy 
(RAM) for execution. The code being executed in RAM can 
be reloaded from that SEEPROM as needed. Software 
located within the SEEPROM can be replaced with new 
software under controlled conditions. The external commu- 
nication device is provided with sufficient memory capabil- 
ity to store a duplicate, or upgrade, version of application 
software for the implantable device as well as to store about 
120 days of operational data. Under controlled conditions 
the external communication device may be reset to its 
default configuration automatically (i.e. upon command 
without the user having to specifically identify specific 
parameter values). In alternative embodiments the software 
may be stored in a different device (e.g. a physical ROM, 
volatile RAM, non- volatile RAM, or in a replaceable plug in 
module). The software may be divided into bootloader and 
application code portions. 

[0136] As noted above, the implantable device and exter- 
nal communication device communicate with each other 
through radio frequency telemetry where reception and 



transmission within the implantable device uses an antenna 
that is located within the mctalic device housing based on a 
carrier frequency that allows an acceptable amount of signal 
to penetrate through the housing and through the human 
body. In alternative embodiments, an antenna for the 
implantable device may be placed on the housing or be 
otherwise located external to the housing so that outgoing 
and/or incoming signals need not penetrate the housing 
material. For the present embodiment the preferred fre- 
quency is either about 131 kHz or about 262 kHz. The 
preferred data transfer rate is at about 8200 bits/second. In 
alternative embodiments, different carrier frequencies may 
be used, e.g. from tens of kilohertz to thousands of mega- 
hertz. Also in alternative embodiments other data transfer 
rates may be used. The external communication device and 
implantable device are configured and operate together to 
provide rapid feedback to the operator. For example, a 
response to a basal rate or bolus programming telemetry 
interaction is preferably provided to the patient within no 
more than 20 seconds and more preferably within less than 
about 10 seconds, and most preferably within less than about 
5 seconds. 

[0137] Each implantable device and external communica- 
tion device are preferably assigned unique telemetry iden- 
tifiers and a particular implantable device and particular 
external communication device are made to undergo a 
linking process (alternatively known as a marrying process) 
so substantive communication (e.g. communications that 
allow the external communication device to control the 
medical operation of the implantable device) is limited to a 
joined pair. The communication link between the external 
communication device and implantable device provides 
various levels of checking and confirmation to minimize the 
possibility of the implantable device receiving and then 
acting on an erroneous delivery command message. In 
alternative embodiments unique identifiers may be supplied 
to only one of the implantable or external communication 
devices, or even non-unique identifiers may be utilized. 

[0138] The linking or marrying process is completed prior 
to a external communication device being allowed to send 
drug delivery commands or updated software to a particular 
implantable device. In this embodiment, each time an exter- 
nal communication device is replaced or reset, the marrying 
process must be repeated. The marrying feature provides the 
mechanism to configure an implantable device to commu- 
nicate with a particular external communication device. This 
is carried out when the implantable device and the external 
communication device are initially configured. The linking 
process requires positive assertion from the user indicating 
that external communication device is linking to the correct 
implantable device. The linking process starts with the 
external communication device sending an interrogate mes- 
sage to all implantable devices within range by using a 
universal identifier. Each implantable device that is within 
range responds to the external communication device's 
interrogate message by sending a response that includes 
patient identity information as stored in that particular 
implantable device. If the desired implantable device is the 
first to respond to the interrogate signal, the user can 
acknowledge his/her desire to link the external communi- 
cation device and the implantable device. Otherwise, if the 
first responding implantable device is not the one to be 
linked to, the patient may indicate so and that particular 
implantable device identifier is added to a temporary exclu- 
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sion list and the interrogate message is resent (including the 
exclusion list). When the interrogate message is received by 
each implantable device, only those whose identifiers are not 
in the exclusion list will attempt a response, thereby allow- 
ing other implantable devices within range to respond and be 
heard. Once the correct implantable device is the one that 
has its response displayed by the external communication 
device, the user can elect to start the linking process. Once 
the link is established, the implantable device is made to 
enter suspend mode and then the user must reprogram all 
basal rates including temporary basal rates that were in 
progress, profile basal rates, and delivery patterns. In alter- 
native embodiments, all or a portion of this information may 
be retrieved from the implantable device, assuming it was 
programmed previously, but in this particular embodiment 
as an added measure of safety, it was preferred that these 
parameters should be reprogrammed so that the user is made 
to provide a positive assertion that he/she knows the delivery 
parameters that the implantable device is using. During the 
linking process the external communication device obtains 
other data from the implantable device that it requires in 
performing its operations, e.g. the external communication 
device obtains stroke volume information for the pulsatile 
pump and obtains insulin concentration data that is stored in 
the implantable device. 

[0139] The sending and receiving of IR signals by the 
external communication device is based oh basic IrDA 
standards. In the present embodiment, the transfer rate for 
the IR link is about 115 kbits/second. Of course in other 
embodiments other baud rates may be used or even auto- 
matically selected between. The IR link may be used to (1) 
upload new software to the external communication device 
from a second external device, (2) download system opera- 
tion information to the second external device for further 
analysis as desired, and/or (3) pass coram ands/responses to 
or from a second external device from or to the implantable 
device. The second external device may be personal com- 
puter running appropriate software or a more specialized 
system. The communications sent over the IR link are based 
on protocol details that ensure that only intended messages, 
and correctly received messages, are received and acted 
upon. 

[0140] In an alternative embodiment a second or third 
external communication device may be used in conjunction 
with the first external communication device or as a tem- 
porary or partial replacement therefor. For example, at night, 
a chest strap, wrist watch, mattress pad, or the like contain- 
ing appropriate telecommunication capabilities might be 
used as a relay device to pick up warning signals or other 
communication signals coming from the implantable device 
and then to transmit them to the first external communica- 
tion device or a third external communication device so that 
a warning may be sounded to wake up the patient, to directly 
notify emergency personnel of a problem, or to notify other 
monitoring personnel in a timely manner of medical device 
operation or patient condition. Such notification may occur 
using any appropriate telecommunication systems, such as 
telephonic or internet connections. In the case of directly 
warning the patient, if the second communication device has 
sufficient power and functionality it may implement the 
warning signal directly. The second or third external com- 
munication devices may communicate with the first external 



communication device via RF telemetry, IR communication 
link, optical link, galvanic connection, inductive communi- 
cation, or the like. 

[0141] The implantable device of the present embodiment ■ 
has various delivery modes. One of these modes is the 
suspend mode wherein the system is caused to reduce 
insulin delivery to a clinically insignificant amount (e.g. 1 
pump stroke (approximately 0.2 units of insulin assuming a 
stroke volume of 0.5 microliters and a U-400 insulin con- 
centration) per hour. It is intended that this minimal rate of 
delivery keep the catheter open. The "suspend mode" mode 
may be used to interrupt delivery of a bolus, priming bolus, 
profile basal rate, diagnostic rate, and/or temporary basal 
rate. The system is programmed to alarm periodically to 
indicate to the user that the system is delivering insulin at a 
clinically insignificant rate. r ITie user may exit suspend mode 
and resume basal delivery. In this embodiment, any bolus 
that is in progress when suspend mode is asserted is canceled 
such that any undelivered portion will not be delivered even 
when suspend mode is cleared. Other than when entering 
suspend mode through the linking process, if the implant- 
able device is delivering a temporary basal rate when 
suspend mode is entered, the temporary basal rate duration 
continues while the pump is in suspend mode, and the 
temporary basal rate is reasserted when suspend mode is 
cleared for any portion of the duration that has not already 
lapsed. Of course in other embodiments other control 
options may be implemented with regard to going into or 
coming out of a mode analogous to suspend mode. 

[0142] The external communication device is program- 
mable using an audio bolus mode. This mode allows a user 
to program the delivery of a bolus without looking at the 
external communication device display. This mode provides 
an audio feedback to the user to indicate the amount of the 
bolus that is being programmed. The audio bolus feature 
allows programming of immediate boluses. Immediate 
boluses are those that specify a quantity of insulin to be 
delivered in as short a time as possible, e.g. a short as time 
as necessitated and allowed by any required repeated opera- 
tion of the pumping mechanism. Under selected conditions 
a parameter selection may be made that dictates the incre- 
mental increase in bolus amount with each successive key 
entry (e.g. press of the Up-Arrow Key) when in audio bolus . 
mode. Under selected conditions, the external communica- 
tion device provides another parameter that enables or 
disables the audio bolus feature. In the present embodiment, 
once the desired bolus amount has been achieved by the 
repeated pressing of the select key, the user may confirm the 
accuracy of the selected amount by pressing a different key 
(e.g. the ACT key). When this confirmation key is pressed 
for the first time the external communication device plays a 
sequence of audio tones so as to indicate the amount 
programmed. If the amount is correct the user may press the 
ACT key again to initiate delivery. If the amount is incorrect 
the user may simply wait a predetermined, but short, period 
of time for the external communication device to time out or 
alternatively, the user may press any key other than the 
confirmation key. A distinct sound is emitted to indicate that 
delivery was not initiated, at which point the user may 
simply start over with the audio or visual programming. 

[0143] Of course in other embodiments, other key press 
sequences may be used in the performance of programming 
an audio bolus. Alternatively, if the system were configured 
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with a microphone or other sound transducer and appropri- 
ate audio command recognition software or hardware, audio 
programming could be performed without any keystrokes or 
with a single keystroke to activate the external communi- 
cation device's listening mode. In a similar vane, if the 
external communication device were configured with a 
sound transducer and appropriate speech enabling hardware 
and/or software, then instead of sounding a series of beeps 
to indicate program status, it could communicate to the user, 
in a predefined language, to indicate the status. In still 
further alternatives, speech recognition and/or speech gen- 
eration hardware could be used to replace or supplement 
keypad or touch screen input capabilities. 

[0144] In the present embodiment, basal rate delivery and 
bolus delivery may be programmed to occur in conjunction 
with each other as opposed to one replacing the other. The 
system does not replace basal rate delivery with bolus 
deliver but instead combines the amount to be delivered 
under basal programming with the amount to be delivered 
under bolus programming to cause a net amount to be 
delivered that is equal to the sum of both amounts. The user 
may program a bolus amount on the external communication 
device and the implantable device will respond by delivering 
that amount. The amount of the bolus is subjected to a bolus 
maximum as described below. 

[0145] The system allows the user to program an amount 
to deliver that the implantable device will deliver as quickly 
as possible using a required number of pump strokes with 
typically no more than 6 seconds between successive pump 
strokes (e.g. 1-3 seconds per stroke). This type of bolus is 
sometimes referred to as an immediate bolus or phase I 
bolus. 

[0146] The system allows a bolus to be delivered where 
the user programs an amount and a duration. The implant- 
able device delivers the amount as a rate (i.e. number of 
pump strokes per unit time) for the duration specified such 
that the amount programmed by the user is delivered within 
the duration. This is analogous to a basal rate or temporary 
basal rate delivery in some manner but is not identical as me 
total amount to be delivered is the sum of this amount and 
any basal rate that is currently in effect. Furthermore, in this 
delivery mode the user does not program the delivery 
amount as a rate. This type of bolus is sometimes referred to 
a square wave or phase II bolus. 

[0147] The system supports a "dual wave bolus" where the 
user programs an amount for immediate delivery (immediate 
bolus) and a second amount for delivery during a specified 
duration (square wave bolus). When programmed in this 
manner the implantable device delivers the immediate 
amount as described above, followed by delivery of the 
second amount over the duration as a square wave amount 
also as described above. 

[0148] The system also supports delivery of an immediate 
bolus while delivery of a square wave bolus is in progress or 
while delivery of the square wave portion of the dual wave 
bolus is in progress so long as the immediate portion of the 
dual wave bolus has been completed. 

[0149] The programming of boluses in the external com- 
munication device is further controlled by a variable bolus 
option. If the variable bolus option is set to "no", only 
immediate bolus programming is allowed and the square 



wave and dual bolus options are removed from the menu 
choices available on the external communication device. If 
the variable bolus option is set to "yes", immediate, square 
wave, and dual wave bolus programming are allowed and all 
menu options are presented to the user. 

[0150] The implantable device holds a number of logs. 
One of these logs is a bolus history log. In this log the 
implantable device maintains the time and amount of 
boluses that have been delivered. This log contains the most 
recent boluses that were delivered. This log is set to contain 
up to a predefined number of boluses after which the log 
wraps around and deletes older entries in favor of recording 
new entries. The external communication device receives 
these records from the implantable device. These records 
may be viewed on the external communication device or 
alternatively they may be downloaded to a second external 
device where they can be viewed in numerical form or be 
plotted for viewing in graphical form. The storage of this log 
information in the implantable device ensures that historical 
information remains available even in the event that the 
external communication device is lost, damaged, or other- 
wise fails. Each time a new bolus is programmed from the 
external communication device and confirmed by the 
implantable device, the details of the previously delivered 
bolus are provided back to the external communication 
device so a log maintained in the external communication 
device is almost as up to date as the log maintained by the 
implantable device. The log maintained in the external 
communication device can be scrolled through for review by 
the patient or healthcare provider. Each bolus history record 
includes the amount, time, and date of the bolus delivery. 

[0151] The implantable device maintains another log that 
provides the total amount of insulin delivered by date. The 
implantable device maintains a history of the most recent 
120 days of insulin delivery totals with the daily total 
separated by basal delivery and bolus delivery. The daily 
totals are downloaded automatically or semi-automatically 
from the implantable device to the external communication 
device each day. As with the bolus log, this information is 
protected from loss or failure of the external communication 
device by its retention in the implantable device. 

[0152] The system maintains multiple sets of basal rates 
where each set dictates basal rate delivery for a selected 
interval of time and each element in each set dictates the 
basal rate delivery for a subset of that selected interval of 
time. In the present embodiment the number of sets is three, 
the selected interval of time is 24 hours beginning at 
midnight, and the subset of the selected interval of time is 30 
minutes which starts at the beginning of each half hour mark 
during the day. As such, each set consists of up to 48 rates 
that can start on any half-hour of the day. 

[0153] For programming convenience, the delivery rates 
r need not be entered for each subset but instead only for those 
subsets that represent a change in delivery rate compared to 
the previous subset. As such, in this embodiment, basal rate 
values are only entered for the subset half hours in which 
transitions occur and are entered by specifying the start 
times and rates. Up to three 24-hour profiles may be entered 
with only one of the profiles selected as active at any given 
time. When a profile is made active, information about that 
profile is communicated to the implantable device to replace 
any other basal rate information retained there. As an added 
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safety feature, only one profile set is stored in the implant- 
able device at any given time. The active profile is repeat- 
edly used day after day to control basal rate delivery in the 
implantable device until it is replaced by a different or 
revised profile. Such basal profile sets may be used for 
different types of days, e.g. work days, non-work days, 
exercise days, non-exercise days, sick days, high stress days, 
and the like. 

[0154] The system allows a temporary basal rate to replace 
any profile based basal rates during a specified period. This 
feature allows the user to program a basal rate without 
changing the basal profile. When the temporary basal rate 
duration lapses, the implantable device resumes delivery of 
the basal profile rate that is then in effect based on the 
selected profile and the then current time of day. The 
temporary basal rate, for example, may be utilized to pro- 
gram lower basal rates during periods of exercise, or used to 
program higher rates during periods of high stress. 

[0155] Selected "personal events" are recordable by the 
user in a personal event log. The personal event log is 
accessed through the external communication device and 
stored in the external communication device. In alternative 
embodiments these events may be communicated to the 
implantable device for safekeeping. The user may record the 
time that certain events occurred, such as exercising, meals, 
or illness. A parameter may be set so as to disable personal 
event logging. When disabled, the option does not present 
itself on the user menu in the external communication 
device. In the present embodiment, the system provides 
sufficient memory and control for retention and review of up 
to 100 such events. 

[0156] "Automatic Off" is another feature of this embodi- 
ment. When this feature is enabled the insulin delivery 
system turns itself off if the user does not interact with the 
implantable device through telemetry for a programmed 
amount of time. This feature may be enabled or disabled. In 
this context, the turning off of the implantable device refers 
to the implantable device going into suspend mode. The 
implantable device alarms if it goes into minimum delivery 
mode as a result of the automatic off interval lapsing. The 
automatic off interval is reset each time the implantable 
device receives a valid telemetry message from the external 
communication device intended specifically for it. In order 
to save battery power in the implantable device, the external 
communication device is programmed to track the time that 
elapses between communications and to alarm 5 minutes 
before the automatic off interval lapses. This enables the 
user to clear the alarm and interact with the implantable 
device before the implantable device itself alarms and thus 
results in reduced power consumption by the implantable 
device. 

[0157] An additional parameter of the present embodi- 
ment is bolus maximum which specifics the size of the 
largest single bolus that can be delivered, A pumping opera- 
tion used in setting up the implantable device, called priming 
bolus is not subject to this maximum. The external commu- 
nication device is programmed so that a user can not 
program an immediate bolus amount greater than the bolus 
maximum. The external communication device is also pro- 
grammed so that the sum of the immediate amount and the 
extended amount of a bolus (regardless of the duration) may 
not exceed the Bolus Maximum. The implantable device 



uses the bolus maximum as a safety check of each bolus 
request that is received from the external communication 
device. 

[0158] The external communication device is pro- 
grammed to sound a maximum alarm if the user attempts to 
deliver an amount of insulin during a predefined period that 
exceeds a predefined limit. In this embodiment the pre- 
defined period of time is one hour and the maximum alarm 
is termed the hourly maximum alarm and the predefined 
limit is 2.5 times the Bolus Maximum. This alarm is 
intended as a safety alert to the user and not as an absolute 
limit on the amount that can be dispensed in any one hour 
period. The external communication device is programmed 
to compute the total amount of bolus delivery during the 
previous one hour period each time a bolus is programmed. 
If the amount already delivered summed with the pro- 
grammed amount exceeds 2.5 times the programmed bolus 
maximum, the external communication device alarms and 
the bolus is not allowed. When an hourly maximum alarm is 
cleared, there is a short window where the user may program 
a bolus that normally would trigger an hourly maximum 
exceeded alarm. Following the short window, bolus pro- 
gramming is subject to the hourly maximum limitation and 
warning again. In the present embodiment the short window 
is set at ten minutes. In the present embodiment both 
amounts programmed for an immediate and square wave 
boluses are considered in triggering the hourly maximum 
exceeded alarm regardless of when the extended bolus 
amount was or is to be delivered. In alternative embodi- 
ments, the external communication device may be pro- 
grammed to take into account quantities that have or will be 
delivered within a one hour period based on the programmed 
amounts and time intervals. In other embodiments the maxi- 
mum amount in the predefined period may be determined 
based on something other than the maximum bolus amount. 
In still further embodiments the maximum bolus amount 
may be implemented as a hard limit. In still further embodi- 
ments, a second or subsequent, bolus programmed in the 
same short window would not be subject to the warning. In 
other embodiments, the external communication device 
could not only warn the patient that the maximum amount 
has been exceeded but would also indicate the amount that 
was delivered in the period being considered. 

[0159] External communication device programming and 
implantable device delivery are also limited by a basal rate 
maximum which is the highest rate that may be delivered 
using a profile basal rate or a temporary basal rate, A 
delivery rate used for diagnostic purposes known as the 
diagnostic rate is not subject to this maximum. The external 
communication device is programmed to inhibit the user 
from entering a basal rate greater than the basal rate maxi- 
mum. The implantable device uses the basal rate maximum 
as a safety check of each basal rate that is programmed. The 
implantable device ignores delivery requests that include 
basal rate amounts greater than the basal rate maximum. The 
external communication device is configured to inhibit the 
user and physician from setting a maximum basal rate that 
is less than any of the basal rates already programmed 
including those in the profiles that are not currently active. 

[0160] The external communication device is capable of 
displaying an estimate of the amount of medication remain- 
ing in the insulin reservoir. The external communication 
device is programmed to alarm when the medication remain- 



12/02/2003, EAST version: 1.4.1 



US 2003/0065308 Al 



17 



Apr. 3, 2003 



ing becomes less than a predefined low-reservoir threshold. 
As with other alarm conditions in the system, low-reservoir 
threshold alarms are reasserted after clearing if appropriate 
actions have not been taken to resolve the condition that 
gave rise to the error or event (e.g. refilling of the reservoir 
has not been completed). Once the low-reservoir alarm is 
cleared, and a predetermined period of time has lapsed and 
the system determines that the reservoir has not yet been 
refilled, the alarm will be reasserted so as to provide the user 
with a reminder to have the reservoir refilled. 

[0161] The implantable device and external communica- 
tion device retain clinical history information as records of 
various events that the system tracks. For example, events 
that stop the delivery of insulin such as alarms are recorded 
in the clinical history. User-initiated events such as suspend 
mode that stop the delivery of insulin are also recorded. 
Refills are also recorded. The system also contains logs for 
system diagnostics such as implantable device battery lev- 
els. Through menu options the user may view these various 
history logs. 

[0162] In this embodiment, the system is programmed to 
allow a user to initiate a self test in both the external 
communication device and the implantable device. If there 
are any error conditions detected, they are reported to the 
user. The system self test includes a number of different 
checks: (1) implantable device memory, (2) external com- 
munication device memory, (3) implantable device piezo 
operation, (4) external communication device piezo opera- 
tion, (5) external communication device vibrator operation, 
and (6) external communication device display. If an error is 
detected, the system reports the error to the user using visual, 
vibrational or audio alarms. 

[0163] The external communication device is configured 
to emit audio alarms, or to vibrate, in the event an alarm 
condition exists. The implantable device always emits an 
audio alarm if an error condition persists beyond a pre- 
defined amount of time based on the particular alarm con- 
dition that exists. The external communication device is 
configured to allow the user to selected audio or vibration 
notification when alarm conditions exist. For many alarm 
conditions, the implantable device is programmed to contact 
the external communication device by telemetry prior to 
sounding an alarm on its own. In the event that the external 
communication device receives the message and success- 
fully notifies the user of the condition and the user clears the 
alarm prior to a predefined time period passing, the implant- 
able device does not sound the alarm directly on its own. In 
the event that the alarm condition is cleared but not resolved, 
the implantable device may directly reassert and sound the 
alarm later or may reassert and recontact the external com- 
munication device through telemetry. 

[0164] The system supports an audio feedback mode 
where the implantable device may be programmed to beep 
on a first predefined number (e.g. 3-10 pump strokes after a 
rate change, and for a first predefined number (e.g. 3-10) 
pump strokes of a bolus. In other alternative embodiments, 
other feedback techniques may be implemented. 

[0165] The system supports a storage mode for the 
implantable device and for the external communication 
device. Storage mode in the implantable device is a state 
where there is no drug delivery and no alarms and the 
frequency of waking up to listen for incoming telemetry 



messages is reduced. Storage mode in the external commu- 
nication device is a state where the screen is blank and no 
user functions are available. The implantable device is 
programmed to enter storage mode upon receipt of a par- 
ticular telemetry command. The implantable device is pro- 
grammed to exit storage mode by receipt of a particular 
telemetry command. There is no implantable device alarm 
that indicates that the implantable device is entering storage 
mode. 

[0166] The external communication device is pro- 
grammed to enter storage mode if there is no user interaction 
with the external communication device for an extended 
period of time (e.g. 5-10 days). The external communication 
device is programmed to exit storage mode in the event of 
user interaction with external communication device such as 
button presses. When the external communication device is 
in storage mode the screen is blank and the external com- 
munication device hardware is put into a low-power state. 

[0167] The system allows refilling of the pump and report- 
ing on delivery accuracy. The system is programmed to 
allow entry of an extracted volume and a fill volume during 
the refill process. The external communication device may 
be made to display delivery accuracy based on a difference 
between the expected amount remaining in the insulin 
reservoir and the actual amount of insulin removed during 
the refill process. 

[0168] In the present embodiment, the system is config- 
ured to support user and physician programming of the 
delivery options using insulin units based on a desired 
resolution value not based on a predetermined pump stroke 
volume. When the external communication device is pro- 
grammed to deliver a certain amount of insulin, the external 
communication device calculates the number of pump 
strokes necessary to deliver that quantity and passes the 
pump stroke information onto the implantable device. The 
pump stroke information is passed in fixed point format 
including both an integer portion and a fractional portion. 
The determination of pump strokes is based on the implant- 
able device pump stroke volume and the insulin concentra- 
tion. 

[0169] The system of this embodiment is configured to 
allow a programming option to be set that allows the 
physician to prime the catheter quickly. As will be discussed 
further hereafter, this option is only available as a supervisor 
function. The priming function/option triggers the implant- 
able device to deliver an amount of insulin large enough to 
fill the catheter. In this mode, pump strokes are delivered as 
fast as possible. The physician is notified when the priming 
bolus is completed. 

[0170] The system supports a special rate called diagnostic 
rate that is only programmable as a "supervisor only" 
function. This special rate is used in determining delivery 
accuracy. The diagnostic rate function triggers the implant- 
able device to deliver at a programmed rate that is not 
subject to the basal rate maximum. 

[0171] In this embodiment, the setting of system maxi- 
mum basal rate and maximum bolus amounts may be 
programmed to be inaccessible to the patient and only 
accessible through a supervisor menu. The patient's ability 
to access these maximum values is controlled by a maxi- 
mum lock parameter that is a supervisor function. When the 
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maximum lock feature is enabled, the user may view, but not 
change, the bolus maximum and the basal rate maximum. 
When the maximum lock feature is disabled, the user may 
change the bolus maximum and the basal rate maximum. 

[0172] The system includes memory space and program 
capability to personalize the external communication device 
and implantable device so that information such as the 
patient name and physician name can be stored for later 
retrieval and review. For example, the personal ID may be 
as little as 10 characters and as much as 200 characters or 
more. . In the linking process it is preferred that at least a 
portion of this information be used in determining that the 
external communication device has contacted the desired 
implantable device (assuming the implantable device has 
already been previously programmed with identity informa- 
tion. When identification information is updated in the 
external communication device it is passed on to and stored 
in the implantable device. 

[0173] The system retains factory default information and 
may be reset to those values when operating under super- 
visor control so that the system may be configured rapidly to 
a known state. The system may also be placed in a stop mode 
or controlled to replace or reload implantable device soft- 
ware when operating under supervisor control. 

[0174] As noted above certain system functions require 
special control and their access is restricted. These features 
are only accessible via a supervisor menu on the external 
communication device. The supervisor menu is password 
protected. The password may be set by the physician while 
in supervisor mode. The supervisor menu system may also 
be entered by using a factory password. The factory pass- 
word may be derived from the system characteristics. For 
example, the factory password may be a fixed number or 
character pattern. It may be based on a variable parameter, 
such as the. date reflected by the external communication 
device, and/or the time reflected by the external communi- 
cation device, and/or the serial number of the external 
communication device. Supervisor options/functions 
include the following: (1) refill, (2) priming bolus, (3) 
diagnostic rate, (4) maximum lock, (5) personal ID setting, 
(6) initialize to factory defaults, (7) download implantable 
device software, (8) slop pump, and (9) set supervisor 
password. 

[0175] The user interface uses four keys, e.g. a SEL, ACT, 
UP and DOWN key, to navigate through menus, display 
options and features, and to program values. The external 
communication device changes the display to the idle dis- 
play which shuts off the bit map display if the external 
communication device keypad is idle for a predefined period 
of time, preferably between 2 seconds and 30 seconds, more 
preferably between 4 seconds and 15 seconds and more 
preferably between 5 seconds and 10 seconds ,e.g. 7 sec- 
onds, while the user is viewing options. The external com- 
munication device may change the display to the idle display 
using a different predetermined time, e.g. a longer time such 
as 15 seconds, if the external communication device is idle 
while the user is in a programming or data entry screen. 

[0176] As noted previously the system is programmed to 
display the current time and date. The time may be displayed 
in either a 12-hour or 24-hour format depending on user 
preference though in either event internal calculations that 
require time are based on a 24 hour clock. 



[0177] All time displays by the external communication 
device are shown in the same format including time stamps 
on historical data and profile start times. This format in the 
present embodiment is based on a relative time measured in 
minutes since the factory initialization of the implantable 
device. 

[0178] Acceptable parameter ranges for selected variables 
used in this first embodiment are depicted in the following 
table. Of course, in other embodiments other ranges are 
possible, other programming units may be used, some 
parameters may be converted to constants while other 
parameters may be added as variables. 



Parameter Name 



Acceptable Parameter Ranges 



Values 



Automatic Off Duration 
Audio Bolus Increment 
Bolus Amount 
Bolus Duration 
Maximum Bolus 
Hourly Maximum Bolus 
Basal Rate 

Temporary Basal Rate 
Temporary Basal Rate 
Duration 

Basal Rate Maximum 
Diagnostic Rate 

Insulin Concentration 



Off, 1-16 hours 

0.4 units or 0.8 units 

0.2 U to Bolus Maximum by 0.2 U 

30 mi n to 4 hours 

0.2 U to 35.0 U by 0.2 U 

2 x /z times the programmed Maximum Bolus 

0.2 U/hr to Basal Rate Maximum by 0.1 U/hr 

0.2 U/hr to Basal Rate Maximum by 0.1 U/hr 

30 min to 24 hrs by 30 min 

0.2 U/hr to 35 U/hr by 0.1 U/hr 
10 to 150 u/hr by 10 u/hr in U-400 
10 to 185 u/hr by 10 u/hr in U-500 
U-400 or U-500 



[0179] As noted above, both the implantable device and 
the external communication device detect and report alarm 
conditions. The following table depicts examples of different 
types of alarms and examples of associated delivery states 
that are entered in response to the condition that gave rise to 
the alarm. 



Alarm Conditions 



Alarm Condition 



Alarm State 
Action 



Low Battery Alarm when there is battery energy 
remaining of about S weeks or less 
Depleted Batter None guaranteed 
Low Reservoir Alarm when 2 mL of drug remaining 

Empty Reservoir Alarm when 1 mL of drug remaining 



Any implantable 
device Hardware 
Failure Detect 
Over Delivery 



Under Delivery 



Self Test Failure 



Alarm when disagreement from 
various delivery calculations produces 
a discrepancy of a first type. 
Alarm when disagreement from 
various delivery calculations produces 
a discrepancy of a second type. 
Alarm when the periodic self test 
including the memory test fails 



Alarm Only/ 
Icon ON 
No Delivery 
Alarm Only/ 
Icon ON 
Alarm Only/ 
Icon ON 
No Delivery 



No Delivery 
No Delivery 
No Delivery 



[0180] As noted above, even when an alarm is initially 
cleared, it may be reasserted if the condition that gave rise 
to it continues to persist. When a condition persists, the 
reassertion of and sounding of the alarm may occur for 
example as indicated in the following table. 
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TABLE 1 



Alarm Reasscrtion Intervals 









Menu 


Persistent 






Internal 


Options 


Icon/Message 


Exception 


Reassertion 


Beep 


Disabled 


Display 


Over Delivery 


0 


5 min 


Yes 


Yes 


Under Delivery 


0 


5 min 


Yes 


Yes 


Low Implantable 


7 Days 


24 Hrs 


N/A 


Yes 


Device Battery 










Low Reservoir 


24 Hrs 


24 Hrs 


N/A 


Yes 


Empty Reservoir 


24 Hrs 


24 Hrs 


N/A 


Yes 


Depleted 


N/A 


N/A 


N/A 


N/A 


Implantable 










Device Battery 










Automatic Off 


N/A 


5 min 


N/A 


Yes 



[0181] In this embodiment, physical and functional fea- 
tures have been considered as well as implantable longevity. 
In addition to the various features noted above, the implant- 
able device and external communication device preferably 
meet certain physical targets: (1) The implantable device is 
preferably packaged in disk shaped housing that is thinner 
than about 1 inch, and preferably thinner than 0.9 inches, 
and more preferably thinner than about 0.8 inches or less, 
with a diameter of less than about 4 inches and more 
preferably about 3.2 inches or less, and having an empty 
weight of less than about 180 grams and more preferably 
less than about 165 grams, and (2) The external communi- 
cation device has been packaged in a somewhat rounded but 
nominally rectangular shaped package having dimensions of 
less than about 1.0 inch by 3.5 inches by 4.0 inches, but more 
preferably having dimensions about 0.8 inch or less by about 
2.8 inches or less by about 3.5 inches or less, and weighing 
less than about 6 oz. In other embodiments, various other 
device shapes and sizes may be used. 

[0182] The implantable device and external communica- 
tion device are preferably also designed and are controlled 
to meet certain longevity requirements in combination with 
the desired functional requirements. It is desired that the 
implantable device remain operational within the body of a 
patient for a period of about five years or longer, more 
preferably a period of about seven years or longer, and most 
preferably a period of about 9 years or longer. As the present 
embodiment uses a non -rechargeable battery, the longevity 
of the implantable device is primarily dictated by the power 
consumption of the electronic modules and the capacity of 
the battery. The determination of longevity is complicated 
by the fact that the power consumption of the electronic 
modules is not constant over time but varies depending on 
the actions that are required by the user. Two elements of the 
preferred embodiment that lead to an acceptable level of 
longevity are the use of low power electronic circuit ele- 
ments and the controlled application of power and/or clock- 
ing signals to various modules. The power and/or clocking 
signals are supplied to the modules on an as needed basis 
and operational protocols have been put into place to mini- 
mize the amount of time that the various modules need to 
operate. As noted previously, an example of such protocols 
include the implantable device's attempt to communicate 
with the external communication device by telemetry prior 
to using a more power consumptive internal alarming pro- 
cess. Another example involves the implantable device 
having a storage mode that uses less power than a normal 



operational mode. A further example includes the implant- 
able device's process of. turning on its receive telemetry for 
short periods of time (about four milliseconds) on a periodic 
basis (once every two seconds) to listen for incoming 
messages and then shutting off the telemetry system if no 
messages are incoming. An additional example, includes the 
processor's ability to turn itself off when it is not needed and 
to be awakened by interrupt signals when needed. These and 
other examples of controlled power consumption are dis- 
cussed further hereafter 

[0183] FIG. 3 depicts a simplified block diagram of vari- 
ous functional components or modules (i.e. single compo- 
nents or groups of components) included in the implantable 
medical device 2 and external communication device 32. 
The external communication device 32 includes (1) a hous- 
ing or cover 34 preferably formed from a durable plastic 
material, (2) processing electronics 42 including a CPU and 
memory elements for storing control programs and opera- 
tion data, (3) an LCD display 36 for providing operation for 
information to the user, (4) a keypad 38 for taking input from 
the user, (5) an audio alarm 44 for providing information to 
the user, (6) a vibrator 46 for providing information to the 
user, (7) a main battery 52 for supplying power to the device, 
(8) a backup battery 54 to provide memory maintenance for 
the device, (9) a radio frequency (RF) telemetry system 56 
for sending signals to the implantable medical device and for 
receiving signals from the implantable medical device, and 
(10) an infrared (IR) input/output system 58 for communi- 
cating with a second external device. 

[0184] The second external device may include input, 
display and programming capabilities. The second device 
may include a personal computer operating specialized 
software. The computer may be used to manipulate the data 
retrieved from the communication device or the medical 
device or it may be used to program new parameters into the 
communication device or directly into the medical device, or 
even used to download new software to the communication 
device or to the medical device. The manipulation of the data 
may be used in generating graphical displays of the data to 
help aid in the interpretation of the data. Such data inter- 
pretation might be particularly useful if the medical device 
provides data concerning a physiological parameter of the 
body of the patient, such as a glucose level versus time. 
More particularly the computing power and display 
attributes of the second device might be even more useful 
when the medical device includes both an implanted sensor 
(e.g. glucose sensor), or external sensor, and an implanted 
pump (e.g. insulin pump), or external pump, where the 
second external device may be used to enhance the ability to 
ascertain the effectiveness of the two devices working 
together. Successful control periods and problem control 
periods could be more readily identified. In fact, if the two 
devices work on a closed loop basis or semi -closed loop 
basis, the analysis performable by the second external device 
may be useful in deriving new closed loop control param- 
eters and/or in programming those parameters directly into 
the communication device or the medical device or devices. 

[0185] The implantable device 2 includes (1) a housing or 
cover 6 preferably made of titanium that may or may not be 
coated to enhance biocompatibility, (2) processing electron- 
ics 72 including two CPUs and memory elements for storing 
control programs and operation data, (3) battery 74 for 
providing power to the system, (4) RF telemetry system 76 
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for sending communication signals (i.e. messages) to the 
external device and for receiving communication signals 
(i.e. messages) from the external device, (5) alarm or buzzer 
82 for providing feedback to the user, (6) refill port 12 for 
accepting a new supply of drug as needed, (7) reservoir 84 
for storing a drug for future infusion, (8) pumping mecha- 
nism 86 for forcing selected quantities of drug from the 
reservoir through the catheter to the body of the patient, (9) 
sideport 14 for providing a replaceable connection between 
the (10) catheter and the pump housing and for allowing 
diagnostic testing of the fluid handling system to occur, and 
catheter 16 for carrying medication from the implant loca- 
tion to the desired infusion location. 

[0186] In this embodiment, the pump mechanism is pref- 
erably a low power, electromagnetically driven piston pump. 
Such as for example Model Nos. P650005 or P650009 as 
sold by Wilson Greatbatch Ltd. of Clarence, New York 
which have stroke volumes of 0.5 microliters and draw 
under 7 mJ (e.g. about 6 mJ) per pump stroke and under 4 
mJ (e.g. about 3 mJ) per pump stroke, respectively. The 
pump mechanism dispenses a sufficiently small volume of 
insulin per stroke so that a desired level of infusion resolu- 
tion is achieved. For example if an infusion resolution of 0.2 
units of insulin were desired when using U400 insulin, then 
a stroke volume of about 0.5 microliters would be appro- 
priate. In other embodiments other types of infusion pumps 
may be used, e.g. peristaltic pumps, screw driven pumps, 
and the like. 

[0187] As depicted in FIG. 3, the implantable device 
includes a reservoir 84 for holding a desired quantity of 
insulin. In this embodiment, the drug held in the reservoir is 
preferably maintained at a slight negative differential pres- 
sure (with respect to the pressure on the outside of the 
housing) so that in the event of a leakage in the reservoir 84 
or housing 6, the drug will not be forced from the housing 
into the body of the patient. The drug is added to the 
reservoir 84 by means of a transcutaneous needle that is 
passed from a position exterior to the body into self sealing 
refill port 12. Due to the slight negative pressure that the 
reservoir experiences, insulin in a syringe connected to the 
needled is drawn into the reservoir without need of external 
force. The drug is extracted from the reservoir 84 and forced 
through catheter 16 by an electronically controlled pump 
mechanism 86. In alternative embodiment positive pressure 
reservoirs may be used in combination with pumping 
mechanisms that force the medication or drug from the 
implantable device and/or used with flow restrictors that 
dispensed the drug at a fixed rate or at a variable rate with 
the aid of valves or flow diverters. 

[0188] The size of the reservoir is preferably large enough 
to hold sufficient insulin so that refilling does not have to 
occur too often. For example, it is preferred that time 
between refills be within the range of 1,5-4 months or 
longer, more preferably at least 2 months, and most prefer- 
ably at least 3 months. Opposing the containment of a large 
volume of insulin, is the desire to keep the implantable 
device as small as possible. In the present embodiment the 
implantable device and reservoir has been designed to hold 
about 13 ml of insulin. A preferred insulin has a concentra- 
tion of 400 units per milliliter and is available from Aventis 
HOE 21 Ph U-400 from Aventis Pharma (formerly Hoechst 
Marion Roussel AG, of Frankfurt am Main, Germany). This 
insulin is a highly purified, semi-synthetic human insulin 



with 0.2% phenol as a preserving agent, glycerol as an 
isotonic component, TRIS as a buffer, plus zinc and Geno- 
pal® as stabilizing agents. This quantity and insulin con- 
centration allows about 2-4 months between refills. In other 
embodiments higher insulin concentrations may be used 
(e.g. U-500 or U-1000) to increase time between refills or to 
allow reduction in reservoir size. In some embodiments, 
when higher concentrations are used, any quantized mini- 
mum delivery amounts may be reduced by modifying the 
pumping mechanism, control circuitry, or software control 
algorithm so that infusion resolution is not adversely 
impacted. 

[0189] The external communication device contains 
appropriate software to provide proper control of the device 
including appropriate functionality to allow communication 
with the medical device, to allow adequate control of the 
operation of the medical device, and to give appropriate 
feedback to the user regarding overall system operation. The 
medical device is provided with appropriate software to 
allow communication with the external communication 
device, to allow safe and appropriate operation of the 
medical functionality of the device, and to allow direct 
feedback to the user concerning device status via the internal 
alarm. 

[0190] The control electronics of both the implantable, 
device and external communication device are centered 
around microprocessor based integrated circuits, i.e. proces- 
sor ICs, that are implemented in the present embodiment in 
the form of application specific integrated circuits (ASICs). 
Two such ASICs are used in the implantable device to 
increase operational safety of the device by configuring the 
device to require that the two ASICs act in conjunction with 
each other in order for medication infusion to occur. 

[0191] In different embodiments, more or less of the 
control electronics may be implemented within one or more 
processor ICs while any remaining portions may be imple- 
mented external to the processor IC(s). The processor IC 
may be referred to as an MD processor if used in the medical 
device portion of the system or a CD processor if used in the 
communication device portion of the system. In other 
embodiments the process IC used in the communication 
device may be different, e.g. have a different CPU or 
different peripheral modules, from a processor IC used in the 
medical device. In embodiments where more than one 
processor IC is used in either the medical device or the 
communication device each of the processors may be dif- 
ferent. They may be specifically designed for their intended 
roles when they perform at least partially different functions. 
Depending on particular design constraints portions of the 
electronics not embodied in the processor ICs may form part 
of one or more hybrid circuit boards or be otherwise 
mounted within, on, or even in some cases external to a 
device housing. 

[0192] A functional block diagram of the Processor IC for 
the present embodiment is depicted in FIG. 6. Each pro- 
cessor IC of the present embodiment includes a CPU 912 
and various peripheral modules that are used for system 
control, data acquisition, and interfacing with electrical 
components external to the processor IC. The peripheral 
modules of the processor IC of the present embodiment 
include (1) a non-volatile memory interface module, e.g. a 
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SEEPROM interface module 914, (2) a boot ROM module 
916; (3) an SRAM module 918; (4) a memory decoder 
module 920; (5) a crystal oscillator module 922; (6) a timer 
module 924; (7) a pump interface module 926; (8) a watch- 
dog module 928; (9) an RF telemetry module 930; (10) an 
interrupt handler module 932; (12) an analog-to-digital 
converter module 934; (13) an LCD clock driver module 
936; (14) an alarm interface module 938; and (15) first and 
second synchronous serial interface modules 942 and 944. 
The memory decoder module interfaces with the core pro- 
cessor, boot ROM, and internal SRAM using a 16 bit 
address bus which also is available off chip for addressing 
external memory. With the exception of the crystal oscillator 
module all other internal module communicate over an 8-bit 
data bus or 16-bit data bus. FIG. 6 further illustrates that the 
A/D module may take input from sources internal to the 
processor IC and similarly the interrupt handler can take up 
to 9 interrupts from sources internal to the processor IC. 
Additionally, most of the modules communicate with out- 
side components or modules over one or more input/output 
lines. 

[0193] In alternative embodiments fewer, additional, or 
different peripheral modules may be incorporated into the 
processor ICs. In one extreme the processor IC may simply 
incorporate a CPU with all other modules being external 
thereto. In the other extreme almost all, if not all, electronic 
components may be incorporated into a single processor IC. 
Intermediate alternatives might incorporate a single addi- 
tional module into the processor IC (in addition to the CPU), 
others might incorporate more than one, e.g. 4 or more, 8 or 
more, or the like. In still other alternatives, the number of 
peripheral modules or components in an entire device may 
be considered and more than a certain percentage of them 
incorporated into one or more processor ICs, e.g. more than 
50%, more than 75%, or even more than 90%. 

[0194] The processor ICs are responsible for basic system 
management and communication of information between 
the implantable device and the external communication 
device through the RF telemetry link. The telemetry systems 
of the present embodiment are implemented in part through 
electrical hardware and in part through software controlled 
by a processor IC. 

[0195] In the present embodiment, most of the required 
electrical modules for the implantable device arc integrated 
within the processor ICs. However, several are not. These 
additional modules include two independent crystal oscilla- 
tors (one for each ASIC); two non-volatile memory modules 
(one for each ASIC), e.g. SEEPROM chips; a volatile 
memory module (used only by one of the ASICs), e.g. an 
SRAM chip; pump driver circuitry (partially controlled by 
the each ASIC); front end telemetry system circuitry; and 
voltage measurement circuitry associated with the pump 
driver circuit; a buzzer; and a battery. 

[0196] Within the implantable device telemetry operations 
are controlled by a single ASIC (sometimes known as the 
main processor). The other processor (sometimes known as 
the monitor processor) controls the buzzer and is thus 
responsible for audio communications coming from the 
implantable device. The medical functionality of the 
implantable device (i.e. the administration of insulin in the 
present embodiment) is controlled by both processors. To 
maintain the implantable device in a fail-safe operational 



mode, these two processors must maintain an appropriate 
level of agreement concerning infusion instructions or a 
system reset is forced to occur. The main and monitor 
processors communicate with each other through the use of 
hardwired serial input and output ports. 

[0197] As with the implantable device, the control elec- 
tronics of the external communication device are centered 
around an ASIC that controls and interacts with a number of 
peripheral modules. These peripheral modules include an 
LCD display and driver, an IR port and driver, a crystal 
oscillator, a keypad and keypad interface, power manage- 
ment modules and reset circuitry, external volatile memory 
(e.g. SRAM) and non-volatile memory (e.g. SEEPROM), a 
buzzer, and front end telemetry hardware. 

[0198] The external communication device (CD) is a 
hand-held device that allows a user to program and com- 
municate with the implantable device. The external com- 
munication device of the present embodiment preferably has 
a weight of less than about ounces, a thickness of less than 
about 0.8 inches, a width of less than about 2,8 inches, and 
a length of less than about 4.0 inches, 

[0199] The external communication device is enclosed by 
housing 34 as depicted in FIG. 2 and includes within 
housing 34 a number of different electronic modules or 
components. These modules and a high level outline of their 
interconnections are depicted in FIGS. 4a and 4b, FIGS. 4a 
and 4b, form the left and right halves of a single block 
diagram. The electronic configuration of the external com- 
munication device is centered on an ASIC 502 which has 
been divided for presentation purposes into left and right 
halves 502a and 502/). 

[0200] The ASIC 502 includes a microprocessor, internal 
ROM, internal RAM and a number of additional modules. A 
number of the ASIC modules used by the external commu- 
nication device are depicted in FIGS. 4a and 46. These 
modules include (1) a watchdog 522, (2) an external reset 
534, (3) an A/D converter 542, (4) a serial ROM port 572, 
(5) a first serial synchronous interface port 592, (6) an RF 
module 612, (7) an oscillator module (650), (7) a tone alarm 
driver 682, and (8) LCD port 692, (9) three interrupt inputs, 
and (10) a number of I/O buses. According to this first 
embodiment, the preferred ASIC for use in the external 
communication device is identical to the ASICs used in the 
implantable device. Further details about the ASIC are 
provided hereafter. 

[0201] The ASIC includes a first interrupt input 512 that 
receives interrupt signals 514 generated by a key interrupt 
generator circuit 516. 

[0202] The ASIC includes a watchdog 522 and watchdog 
output 524 that is fed into "OR" logic circuitry 526 that 
effectively performs an "OR" operation on three different 
signals. An output signal 528 of the OR logic circuitry 526 
is fed into an input 532 of the ASIC which in turn is 
connected to reset circuitry 534 that triggers the Processor 
IC to be reset. The Processor IC can be reset by making any 
of the three signals high which in turn will drive the output 
of the "OR" logic circuitry high and thus the input 532 high. 
The watchdog output signal 524 is made to go high when the 
processor does not reset the watchdog in a timely manner. 

[0203] The ASIC includes analog-to-digital converter 
electronics 542 that uses two external inputs 544 and 546 
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which arc used, respectively, for measuring a voltage (VAA) 
of a main battery and a voltage (VCOIN) of a backup 
battery. 

[0204] The ASIC includes a second external interrupt 
input 552 that is connected to battery failure detection 
circuitry 554 by line 556 that carries a high reset signal. 

[0205] The ASIC includes an I/O bus 562 for carrying 
address, data and control signals to and from 1 megabyte of 
external SRAM 564 located on two external chips. Each 
chip is a four megabit, low power SRAM, organized as 256k 
by 16 bits, operating between 2.7 and 3.6 volts, with a 
maximum standby current of 15 t uA, This memory may be 
accessed either byte-wide or word-wide, as controlled by 
two external ram signals from the ASIC. Furthermore, an 
additional two signals from the ASIC are used for chip 
selection and a third additional signal is sued for bank 
selection. The third additional signal uses the same output as 
did the pump fire signal on the monitor processor in the 
Implantable Device. I/O bus further provides 17 address 
lines and 16 data lines. 

[0206] A power management module 722, to be further 
discussed hereafter, produces a back up battery power signal 
762 that goes high when the main battery 732 fails and 
power is being supplied by the back up battery 752. When 
the signal 762 is high, access to the SRAM chips is disabled 
and thus memory access is denied. This is implemented to 
prevent memory access during unstable periods and to 
tri-state the memory chip outputs so they are not driving low 
impedance inputs when boosted voltage 736 (VCC), coming 
from up-converter 734 that is powered by the main battery 
732, fails. 

[0207] The 762 signal and one of chip selection signals 
(depending on the SRAM chip being selected), are provided 
to the inputs of an OR gate and the signal from the OR gate 
(not shown) is the control signal that is passed to the SRAM. 
As such, for the particular SRAM chip to be accessible both 
these signals must be in their low states. 

[0208] These memory chips are powered by power signal 
756 (VPOS) that is derived from VCC when it is available 
and from the backup battery when VCC is not available. 

[0209] The ASIC includes a SEEPROM port 572 that is 
used to connect to two external SEEPROMs 574 using a 
power output signal 576, a clock output signal 578, and a 
bi-directional data communication line 582. The 
SEEPROMs may be identical chips, for example. They 
preferably have a two wire interface, are internally orga- 
nized as 64k by 8 bits, support bi-directional data transfer, 
and use an operating voltage between 1.8 and 3.6 volts. 
These chips are used to provide memory space for program 
code and program data. The addresses of these two 
SEEPROM chips are set by hard wiring. Each chip has a 
capacity of 64K bytes, organized as 512 pages of 128-bytes 
each. Each SEEPROM is configured so that it can be written 
to as well as read from during run time by the system 
processor. 

[0210] In the present embodiment one of the SEEPROMs 
is used for storing external communication device software 
which is loaded into internal RAM or external RAM during 
system boot up, while the other SEEPROM is capable of 
holding software for download to the implantable device. 



[0211] The ASIC includes a first synchronous serial inter- 
face port 592 that is functionally connected to an external 
UART 594 using several lines 596, including a single clock 
line for both incoming and outgoing data, a data-in line for 
data coming from the UART to the Processor, and a data-out 
line for data going to UART. 

[0212] A third external interrupt input 602 for the ASIC is 
connected to UART 594 by line 604. A high signal is 
generated on line 604 by the UART chip whenever serial 
data is received through the IrDA port. 

[0213] The ASIC also provides an RF telemetry module 
612 which provides TXI and TXQ signals, on lines 614 and 
616, to RF transmitter circuitry 618. The RF telemetry 
module also provides a power signal 622 to RF receiver 
circuitry 624. The RF receiver circuitry provides a first and 
second mixer input signals, 626 and 628, respectively, back 
to a mixer 632 in the RF telemetry module 612. The RF 
module also provides a control signal 634 to switching 
circuitry 636 that effectively connects either the RF trans- 
mitter circuitry to an antenna 638 or RF Receiver circuitry 
to the antenna 638. The control signal 634 is also provided 
to a NAND gate 642, 

[0214] The RF telemetry system in the external commu- 
nication device is similar to that of the implantable device in 
overall configuration and in control though some differences 
in circuit detail do exist. The RF system uses a carrier 
frequency of about 250 kHz (e.g. 262,144 Hz +/-125 Hz). 
The RF telemetry subsystem is composed of analog and 
digital modules. The digital module includes a QFAST® 
modulator/demodulator, a control and timing logic circuit 
that are integrated in the Processor IC. 

[0215] The analog module consists of an RF front-end 
circuit and a mixer. The mixer is also integrated in the 
processor IC. The RF front-end circuit consists of RF 
transmitter circuitry and RF receiver circuitry, which is 
in-turn composed of a band-pass filter and a 3-stage ampli- 
fier. 

[0216] The RF receive circuitry and transmit circuitry 
share the same antenna 638. The antenna 638 is a faraday- 
shielded, air-coil, housed within the housing of the external 
communication device. The antenna and the faraday shield 
are connected to the printed circuit board. 

[0217] The antenna is switched between transmit and 
receive functions in a similar manner to that described above 
with regard to the implantable device. Switch 636 is similar 
to switch 234 of the implantable device and includes a 
tristate driver and an analog switch. The switch is also 
controlled in an analogous manner. The transmitter 618 is 
substantially the same as that described above for the 
implantable device. 

[0218] The RF Receiver 624 is similar to that used in the 
implantable device. As with the implantable device, the RF 
Receiver module 624 includes three amplifier stages that are 
tuned to pass and amplify desired signals. In contradiction to 
the implementation in the implantable device, all three 
stages of in the external communication device are tuned. 
The first stage has its frequency response set by a tank circuit 
with tuning adjustable by a variable capacitor. The signal 
from the tank circuit is passed through a direct current 
voltage blocking capacitor and then on to a pair of transistors 
in a push-pull configuration. The transistors may be identical 
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to those used in the implantable device. The second and third 
stages use tuned push-pull transistor configurations. 

[0219] The signal resulting from these three stages has 
preferably been amplified by 70 to 90 dB with an RF 
passband of about 16 kHz (e.g. about 2 14 Hz) centered 
around a 262,144 kHz carrier at the 2 dB ripple peak-to-peak 
maximum. An RF stopband of about -65 dB is provided at 
below about 150 kHz and at above about 550 kHz, 

[0220] The line carrying the output signal from these three 
stages is taken to ground through a 100 kQO resistor and 
then a 390 pF capacitor. A first signal, RFI, is taken from the 
output signal prior to the output signal passing through the 
resistor. A second signal, RFQ, is taken from the output 
signal from between the resistor and the capacitor. The RFI 
and RFQ signals are then passed onto the main processor IC 
The RFI signal is the filtered and amplified RF signal that 
was received by the telemetry system, while the RFQ signal 
is a direct current signal having a voltage value equal to the 
average voltage value of the RFI signal, 

[0221] The ASIC is also connected in parallel to a crystal 
oscillator 652 and associated resistor 654 by lines 656 and 
658. 

[0222] The ASIC is additionally connected to a first output 
port 662 by an I/O bus 664 and a second output port 668 by 
an I/O bus 672. Each of these two output ports may be 
formed from an octel tristate non-inverting D flip-flop. 
These output ports are latching so that inputs from the CPU 
need not be maintained constantly. 

[0223] Address decoding and port enablement are pro- 
vided by a single external port and address decoder chip. 
This decoder is preferably a 1 -of-8 Decoder/Demultiplexer. 
This address decoder chip is used by both the output ports 
as well as the keyboard input port 702. 

[0224] The output ports are enabled/disabled by the 
RESET signal 726. Such that when RESET is asserted (low) 
due to the main battery voltage VAA falling below a 
programmed threshold, the output ports are tri-stated. When 
this happens, pull-up resistors set the outputs to appropriate 
states so that all high current devices are shutdown. This is 
done to preserve the energy stored in the VCC storage 
capacitors so it is only used for powering the appropriate 
portions of the circuit for an orderly shut-down. 

[0225] The ASIC further provides tone driver circuitry 682 
to an audio alarm 44 (e.g. a piezo alarm) by lines 686 and 
688 that carry first and second buzzer signals that are 
produced by the Processor IC. 

[0226] The ASIC further includes a second synchronous 
serial interface port 692 that functions as an LCD port for 
communicating with an LCD module 694 that includes LCD 
driver and display 36 (FIGS. 2 and 3). Three communica- 
tion lines 696 are used between the serial interface port and 
the LCD module. One of the lines provides a selectable 
clock, for driving the LCD, of either about 64 kHz or 32 kHz 
(i.e. about 216 Hz or 2 15 Hz). An additional three control 
signals 782 are provided by output port 662. These control 
signals include a chip select signal, a reset signal, and a 
clock loop back signal. 

[0227] The LCD of the present embodiment is powered by 
an LCD driver chip, such as Part No. MC141800A from 
Motorola. Communication to the LCD module is performed 



using I 2 C serial communication protocol. The communica- 
tion lines arc supplied directly from the second serial 
synchronous interface communication port of the Processor 
IC. 

[0228] The external communication device visually com- 
municates to the patient using an LCD display 36. This 
display includes a dot-matrix graphics LCD for displaying a 
portion of the information to be conveyed and an icon/fixed 
segment display for displaying the remaining information to 
be conveyed. The dot-matrix display allows various lan- 
guages to be displayed with only a software change or 
change of a parameter (variable) within the software. In the 
present embodiment the dot-matrix portion has a display 
region of about 100x55 pixels. 

[0229] FIG. 5 depicts the display 36 of external commu- 
nication device 32 including the icon/fixed display region 
852 and the bitmap display area 854. The icon/fixed element 
display bar includes a time-of-day indicator 856 which is 
made up of 4 seven segment display elements, a ":" symbol, 
an "AM" symbol, and a "PM" symbol. The icon bar also 
includes a battery symbol 858 that turns on when the main 
battery of External Communication Device is getting low. 
The icon display also includes an alarm icon 860 in the 
shape of a bell that is turned on when an alarm condition is 
in effect. The icon display further includes a 4 segment 
reservoir level indicator 862. When the reservoir is esti- 
mated to be full all four segments are powered and as the 
estimated reservoir level drops individual segments are 
successively turned off. The icon display further includes a 
circular display 864 comprised of 4 pie shaped wedge 
elements. The number of pie-shaped wedges being dis- 
played and their motion are indicative of the delivery 
condition that is currently active. A month indicator 866 is 
formed from three 16-segment displays while a date display 
868 is formed from two additional 7 -segment displays. 

[0230] Turning back to FIGS. 4a and 4b, the ASIC is 
further connected to an input port 702 by an I/O bus 704. 
This input port preferably is an octal 3-state non-inverting/ 
buffer/line driver/line receiver. This is a non- latching port. 
Address decoding and port enablement is provided by a 
single external port and address decoder chip whose use is 
shared by output ports 668 and 662. 

[0231] The keypad 38 is linked to an integrated key 
interface device 712. The integrated key interface device 
includes key interfacing, key debouncing, and ESD suppres- 
sion functions. This device is preferably an octel CMOS 
switch debouncer with ESD protection for input pins up to 
15 kV. The keypad 38 includes four keys with raised buttons 
and tactile responsiveness and one key without a raised 
button or tactile responsiveness (i.e. a hidden key). 

[0232] The integrated key interface device 712 outputs 
five signals 714 that are provided to input port 702, the key 
interrupt generator 516, and to a key reset generator 716. 
Signals 714 include a separate signal for each of the five 
keys. The signal for each key is low when that key is 
depressed. The de-bounce duration provided by device 712 
is at least 20 ms and is 40 ms typically. The ESD suppression 
is rated at 15 kV using the human body model. 

[0233] The key interrupt generator 516 includes an 8 input 
NAND gate that takes the signal from each of the five keys 
and performs a NAND operation on them, such that if any 
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one of the keys is depressed (i.e. at least one low input) a 
high signal will be output by the NAND gate and if no key 
is depressed (i.e. no low input) a low signal will be output 
by the NAND gate. The output of the NAND gate is then 
passed to one input of a two input AND gate along with the 
reset signal 726 as the other input. As a result if reset signal 
726 is high (i.e. not asserted and at least one key is depressed 
then a high asserted signal is received on line 514 by the first 
interrupt input 512. If reset signal 726 is low (i.e. asserted) 
then any keyboard activity is blocked from asserting the 
interrupt signal. 

[0234] The key reset generator 716 provides an output 
signal 718 to an input of the OR logic circuitry 526. The key 
reset generator 716 receives low signals from the keys that 
are pressed and high signals from the keys that are not being 
pressed. A series of OR gates are used to determine if all five 
keys are depressed (i.e. the four keys with raised buttons and 
one key without a raised push button). The output of the OR 
gates is passed through a 100 KQ resistor and is linked to 
ground using a 0.1 capacitor. This capacitor and resistor 
are used to suppress short glitches that might be caused by 
static discharge from the external world via the keypad. 
Glitches shorter than about 10 milliseconds are suppressed. 
The output signal is then fed to an inverter and then passed 
to one input of a two input AND gate. The other input of the 
AND gate is reset signal 726. The output of the AND gate 
is the key reset signal 718. Which is passed on to the OR 
logic circuitry 526. 

[0235] In addition to the input port 702 receiving key press 
signals 714 from the integrated keyboard interface 712, it 
also receives main battery low input signal 724 from power 
management circuitry 722 and a reset signal 726 from 
battery fail detector 554. The signal 724 is asserted low and 
when asserted indicates that the main battery voltage is low. 
The reset signal 726 is asserted low and when asserted 
indicates that the main battery is dead. The state of keypad 
is monitored by input port 702 and the processor is expected 
to read the input port to determine which key was pressed 
after receiving a keyboard interrupt. 

[0236] The main source of power for the external device 
is a replaceable, AA cell main battery 732 of either the 
alkaline type or lithium type. A main battery voltage signal 
738 (VAA) is supplied to various components and modules 
as needed. Signal 738 is supplied to an input pin 544 of the 
analog-to-digital converter that is included in the Processor 
IC. 

[0237] The VAA signal 738 is also supplied to a switching 
type pulse width modulated DC-DC up-converter 734 that 
produces a boosted voltage signal 736 (VCC) of a definable 
amount. In the present embodiment the definable amount is 
3.45 volts +/-0.1 volt when powering a minimum load of 30 
ohms and when supplied with an input voltage of between 
about 1.1 volts and 1.8 volts. The maximum ripple is 80 mV 
peak-to-pcak. The start-up voltage of the up-converter is no 
greater than 1.00 V when the starting load is less than 100 
ohm at the output. The switching frequency is between 550 
kHz and 750 kHz, nominally 600 kHz. However, under light 
load, the up-converter utilizes burst mode, resulting in a 
wider noise spectrum. As VCC is generated using high 
frequency switching, the up-converter is preferably shielded 
from other components so as to minimize negative effects 
that might otherwise result, such as, for example, on telem- 



etry reception. In the present embodiment about 440 /*F of 
capacitance is supplied to the VCC lines so as to provide 
some energy storage for the VCC signal. 

[0238] The output signal 736 of the converter734, VCC, is 
the main operating power for the external communication 
device though FIGS. 4a and 4b, explicitly depict only two 
of the modules to which voltage signal 736 (VCC) is routed: 

(1) the external power on reset generator module 742, and 

(2) power management module 722. 

[0239] A backup battery 752 is shown as supplying a 
voltage signal 754 VCOIN, to power management module 
722 and is also passed to analog-to-digital converter input 
546 for voltage monitoring. A preferred backup battery is a 
3.0 volt lithium battery having a 48 mAHr capacity. As noted 
above, the power management module outputs a signal 756 
that supplies power to the any circuits that are to remain 
powered by the backup battery when the main battery 
voltage signal 738, and thus boosted voltage signal 736, falls 
below a usable level. 

[0240] In the present embodiment the external SRAM 564 
is powered by signal 756. For data retention to occur the 
voltage supplied must be at least 2.3 volts. In this embodi- 
ment signal 756 supplies a voltage of about 2.7 to about 3.6 
volts depending on whether or not the power is being 
supplied by the main battery or backup battery. The maxi- 
mum operating current for signal 756 is about 1 mA. 

[0241] Power management in the present embodiment is 
based on the power management module 722, battery fail 
detector module 554, and external power on reset generator 
module 742. These modules are implemented using three 
primary integrated circuits along with other peripheral ele- 
ments. The functions of the power management system 
include providing back-up power for the on-board SRAM, 
providing proper power-up reset, and providing adequate 
time for orderly system shut-down when the main battery is 
dead or removed. 

[0242] The first chip is a 3 volt adjustable microprocessor 
supervisory IC which handles the functions performed by 
.the power management module 722. This chip monitors 
signal 736, VCC, and provides signal 736 as the source for 
output signal 756 so long as VCC is about 2.7 volts or 
greater and otherwise provides signal 754, VCOIN, as the 
source for output signal 756. When VCC rises above, about 
2.90 volts, signal 736 is switched back in as the source for 
output signal 756. The chip also monitors main battery 
voltage (VAA) and provides low power signal 724 when 
VAA falls below a desired threshold that is sellable by 
selection of peripheral voltage dividing resistors. In the 
present embodiment the selected amount is about 1.1 volts. 
The low power output signal 724 is connected to input port 
702 where it can be monitored by the system processor. The 
low power signal 724 is used by the Processor IC to provide 
a low battery indication to the patient. 

[0243] As noted above, the battery management IC also 
asserts an output signal 762 when the backup battery is 
switched in as the source of VPOS. This signal is used to 
gate the chip select of the SRAM chips 564 so that when the 
back up battery is maintaining the data in the SRAM chips, 
the SRAM chips cannot be accessed so as to protect the 
integrity of ihe data. This asserted stale also cuts the backup 
battery voltage to the processor using a PFET switch that 
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opens line 754 so that it is not connected to A/D input 546. 
This is done so that the backup battery is protected from a 
potentially low impedance path to ground (e.g. the A/D input 
of the ASIC) that may occur when VCC is absent. 

[0244] When the main battery is dead or removed, all 
memory access must be completed before the back up 
battery on signal 762 is asserted. The energy storage capaci- 
tance on VCC serves this function by providing time for 
system shutdown (enough time for completing selected 
shutdown activities before VCC falls low enough that the 
back up battery on signal 762 is asserted. 

[0245] The second chip is a micro-power voltage monitor 
IC that is used as a programmable voltage detector and 
handles the functions performed by the battery fail detector 
module 554. The programm ability is determined by the two 
voltage divider resistors. A hysterisis effect is used to ensure 
a good pulse and is obtained by use of a 500 kQ resistor that 
bridges the input and output lines of the chip. This com- 
parator monitors the voltage signal 738 of the main battery. 
The output line of the chip provides low reset signal 726. A 
second output signal for the battery fail detect module is 
provided by passing signal 726 through an inverter to obtain 
a high reset signal 556. The threshold is set at about 1.0 V 
in the present embodiment. The low reset output signal 726 
is connected to one of the inputs of input port 702. The high 
reset signal 556 is used as a power-fail interrupt signal to the 
processor. This interrupt signal is fed directly to the second 
external processor interrupt input 552. 

[0246] When the low reset signal 726 is asserted, the 
Processor disables the output ports, which in turn shut down 
all high power devices. This is to ensure that the energy 
stored in the VCC storage capacitance is used only to 
support the orderly shutdown activities of the system in the 
case when the AA battery is dead or removed. During 
shutdown mode a number of conditions are set: (1) key 
presses no longer generate key board interrupts to the 
processor, (2) UART activity no longer generates a UART 
interrupt to the processor, (3) the output ports, 668 and 662 
are tri-stated, (4) the LCD is held in unselected and reset 
state, (5) the backlight is disabled, (6) the vibrator is 
disabled, (7) the IrDA module is put in shutdown state, (8) 
the UART is put in shutdown state, and (9) a 150-ohm 
dummy load is disabled. 

[0247] Since the high reset signal 556 is asserted by VAA 
falling below a threshold value (i.e. failure value for VAA) 
and since the failure of VAA will cause voltage up conver- 
sion by module 734 to cease and since all high powered 
circuits have been shut down and since the back up battery 
on signal is triggered by VCC failing and since VCC will be 
maintained for some period of time by storage capacitance, 
there is a time lag between assertion of the high reset 556 
and then assertion of the back up battery on signal 762. In 
this embodiment, the circuitry and storage capacitance have 
been configured to provide a lag of at least about 100 ms. 
This amount of time has been selected as it is sufficient to 
enable all shut down activities by the processor to be 
completed prior to assertion of the back up battery on signal 
762. 

[0248] The third chip is an open drain reset IC and handles 
the functions performed by the external power-on reset 
generator 742. It monitors the voltage signal 736, VCC. The 
chip produces an output pulse, or reset pulse, when the VCC 



voltage level transitions through a programmed threshold 
voltage level. This reset pulse occurs when transitions are 
from low to high or from high to low. This reset pulse is 
routed through an inverter and then to an input of an AND 
gate. 

[0249] The input to the inverter is normally retained in a 
high state by a pull up resistor. However, the input to the 
inverter is brought low when the low level reset pulse output 
by the chip occurs. A second input to the AND gate is 
provided by the low reset signal 726. This is done so as to 
only pass the pulse on VCC rising but not the pulse on VCC 
falling. From the AND gate the signal is routed to OR gate 
526. 

[0250] Output port 668 provides UART control signals 
758 to the UART circuitry and provides a signal IrDA power 
down signal 760 to an IrDA module. The UART control 
signals include a chip selector signal and a shutdown signal. 
A preferred UART has an SpI™/Microwire™ interface and 
is capable of supporting RS-232 and IrDA links. 

[0251] The UART supplies data on line 764 to an inverter 
772 and from the inverter 772 to an IrDA transceiver module 
780 on line 764'. The IrDA transceiver module then trans- 
mits that data through an infrared carrier to a receiver in a 
second external device (not shown). Data that the IrDA 
device receives from the second external device through an 
infrared carrier, is in turn passed to an inverter 774 on line 
766* and the inverter then sends the data on line 766 to the 
UART. 

[0252] The data transfer rate through this port is fixed at 
115.2 Kbit/s, This port complies with the IrDA 1.2 Low 
Power standard. Whenever external data is received by the 
IrDA transceiver, a UART interrupt is generated by the 
UART IC. This interrupt, after passing through an inverter, 
is fed directly to the third external interrupt input of the 
processor. 

[0253] The UART may be placed in a shutdown stale to 
save power. When the UART is in shutdown state, its 
oscillator is stopped. When the UART is set to be taken out 
of shutdown state, it takes some time to start up the 
oscillator, and as such, application software is configured to 
provide a minimum of 100 ms for the UART to come out of 
shutdown stale before real data is transported using this port. 

[0254] Output port 662 also provides an enable quiet mode 
signal 784 to NAND gate 642. The enable quiet mode signal 
784 is used for quiet RF mode control. This signal is asserted 
high and is used when asserted to disable the EL backlight 
806 and the vibrator 46. This signal is asserted during RF 
reception so that noise from these devices will not interfere 
with RF reception. 

[0255] The NAND gate 642 takes signals 784 (enable 
quiet mode) and 634 (RF receive power) and produces an RF 
quiet signal 786 and provides it as input to AND gates 792 
and 794. As the enable quiet signal 784 and RF receive 
power signals are both asserted high, the output of the 
NAND gate is low when both are asserted. The low RF quiet 
signal 786 disables the high noise devices stated above. It is 
also connected to VCC using a 150 ohm dummy load. The 
purpose of this load is to force the up-converter to operate 
at the 600 kHz nominal switching frequency, instead of any 
other frequency or burst mode. This helps in reducing noise 
during RF reception. 
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[0256] Output port 662 provides an output signal (not 
shown) to a 150 ohm dummy load that may be used to place 
a load on the AA battery during battery voltage measure- 
ment. This load is turned on by providing a high signal to it 
from the processor IC 

[0257] Output port 662 provides an enable LED signal 788 
to AND gate 794, The enable signal 788 is the backlight 
"on" signal and is asserted high. When asserted, this signal 
causes the backlight to be turned on unless the RF quiet 
signal is being asserted (i.e. low). AND gate 794 supplies its 
output 802 as an input to a backlight driver 804 which in turn 
powers an Electroluminescent (EL) backlight 806 which 
lights up the LCD device. A high RF quiet signal 786 enables 
the selection of the backlight while a low RF quiet signal 
disables the selection of the backlight, while the enable LED 
signal turns on and off the backlight when enabled. The 
backlight is controlled in this way because it is high current/ 
high noise device, and it is desirable to disable it during RF 
reception. When the system is not in an RF reception state, 
the backlight is enabled regardless of the setting of enable 
quiet signal 784 because RF receive power signal 634 is low. 

[0258] The Electroluminescent (EL) backlight panel is 
used It) illuminate the LCD in low light level conditions with 
a green light having about 0.15 ft Lm brightness at 0.75 
inches from the output of the LCD display. The EL panel is 
driven by a DC- AC converter IC that boosts the voltage 
level. The DC- AC converter with the aid of an inductor to 
help generate the boosted voltage level and a capacitor for 
setting the oscillator frequency boosts the voltage from VCC 
to a signal of about 140 VAC peak-to-peak at about 300 Hz. 

[0259] Output port 662 provides and an enable vibrator 
signal 790 to AND gate 792. The enable vibrator signal 790 
is asserted high. When asserted this signal turns the vibrator 
on unless the RF quiet signal 786 is being asserted (i.e. low). 
AND gate 792 provides its output 812 as an input to the 
vibrator device 46. The RF quiet signal 786 enables (logic 
high) and disables (logic low) the selection of the vibrator, 
while the enable vibrator signal 790 turns on and off the 
vibrator when enabled. The vibrator is controlled in this way 
because it is a high current/high noise device, and it is 
desirable to disable it during RF reception. When the system 
is not in RF reception state, the vibrator is enabled regardless 
of the setting of the enable quiet signal 784 because the RF 
receive power signal 634 is low. 

[0260] The vibrator 46 is a DC vibration motor which is 
used as a secondary alarm device. The preferred motor 
draws a current of about 60 raA and has a nominal rpm of 
about 8100. The signal from AND gale 792 is used to control 
an N-MOSFET transistor switch to supply the VCC signal 
to the motor. 

[0261] As discussed above, a single processor IC is used 
in the external communication device while two processor 
ICs arc used in the Implantable Device. In this first preferred 
embodiment all three of these processors are identical. 

[0262] As it is preferred that the implantable device have 
a long implanted life, and as the implantable device of the 
present embodiment does not use rechargeable batteries, a 
low-power constraint is imposed on the processor IC. This 
low power constraint is three fold: (1) use of low power 
circuit elements and design, (2) use of electronic modules 
that are capable of being put into low-power consuming 



states or non-power consuming states when not needed to 
perform specific functions, and (3) use of control hardware 
or software to put the modules in their reduced power states 
and to pull them out of those states. The result is that the 
processor IC is designed and controlled to operate at an 
average power of less than about 30 ^W. At a supply voltage 
of 2.9 Volts, this power consumption turns into an average 
current of less than about 11 jiA. The entire implanted 
electronic system preferably draws an average of less than 
about 32 fiA. In this embodiment, the processor IC operates 
with a voltage of between about 2.3 V and 3.6 V. To achieve 
desired overall power consumption for the implantable 
device, the processor IC is a custom designed CMOS device 
using 0.8 micron technology with the physical construction 
of cell design utilizing small gates, drains, and diffusion 
regions. 

[0263] The core processor 912 design preferred in the 
present embodiment is a CMOS low power version of the 
INTEL 8086 processor with a minimized number of logic 
gates and enhanced timing so as to consume less power. The 
Core Processor includes ten additional instructions so that it 
is software compatible with the 80186 processor. It is a 
multiplexed bus device having the 16 low order address bits, 
out of a total of 20 address bits, multiplexed with the 16 data 
lines. De-multiplexing is achieved with on-chip latches so 
that the low order 16 address lines are available as outputs 
to the device. The four high order address lines and the bus 
high enable signal are not multiplexed. As noted above, the 
processor IC also integrates a number of modules and 
functions so as to reduce the power consumption as com- 
pared to using discrete components for achieving the same 
functionality. 

[0264] A SEEPROM interface 914 is provided within the 
processor IC for exchanging information with an off chip 
SEEPROM device, A two line interface is used to exchange 
data with the SEEPROM device and a power line is also 
supplied from the processor IC to the SEEPROM so that it 
may be selectively powered so as to reduce power consump- 
tion when access to the SEEPROM is not needed. In the 
present embodiment, the SEEPROM associated with each of 
the two processor ICs in the implantable device has a 
capacity of 32 kbytes while the two SEEPROMs used in the 
external communication device have a capacity of 64 kbytes 
each. In the present embodiment, the SEEPROM provides 
periodic acknowledgments when the SEEPROM is inter- 
acted with. A SEEPROM control register and a SEEPROM 
data register are also provided. These two registers provide 
a bit that supplies power to the SEEPROM, a bit that 
provides an oscillating signal to the SEEPROM, a bit that 
provides data to be written to the SEEPROM, and a bit that 
can be read to pickup data that is being supplied by the 
SEEPROM. 

[0265] The Boot ROM 916 is an on-chip read only 
memory that provides the initial boot code for the CPU. The 
Boot ROM is 1 kbyte metal mask programmable ROM. 

[0266] The address location of the beginning of the boot 
ROM 916 is is consistent with the Intel 8086 specification 
for reset vectors. When reset occurs, the processor begins 
execution of the code found in ROM which is a program that 
loads further code from the SEEPROM located off-chip. 
Further details on execution of the ROM code may be found 
in the previously referenced U.S. patent application corre- 
sponding to Docket No. USP-1075-A. 
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[0267] A 16 kbyte section of static RAM (SRAM) 918 is 
provided within the ASIC. This space is used for stack, 
general variables, and core program space such that most of 
the operational implantable device code and external com- 
munication device code reside in this space. 

[0268] The processor IC includes a memory decoder mod- 
ule 920 that is capable of decoding the 16 kbytes of internal 
SRAM and is also directly capable of decoding 512 Kbytes 
of external memory. The memory decoder contains Boolean 
logic gates to decode the 8086 address space for each 
individual bus transaction. The amount of externally addres- 
sable SRAM may be increased by adding one or more 
additional bank select triggers such as by using the a 
processor IC output that is not being used for some other 
function. For example, in the external device the output 
signal that is used to fire the pump mechanism may instead 
be used as a bank select signal as it is otherwise not being 
used. This provides the ability for the external communica- 
tion device to be able to decode 1 Mbyte, or more, of 
external SRAM. The memory decoder is farther capable of 
decoding the 1 Kbyte of internal ROM. 

[0269] A low power crystal oscillator module 922 internal 
to the Processor IC is used in conjunction with the an 
external oscillator crystal and a shunting resistance to pro- 
vide a stable 1.049100 MHz +/-500 Hz clock source while 
drawing less than about 2 fiA from a 2.2 V to 3.5 V supply. 
The circuit is intended to operate with a minimum frequency 
of 1.048576 MHz crystal using a shunt resistance of about 
20MQ in the implantable device and about 2MQ in the 
external communication device. The shunt capacitance of 
the crystal is preferably no greater than 1.5 pF. An external 
shunt resistor is provided in parallel to the clock crystal 
across two external connectors of the ASIC to provide DC 
feedback to the circuit. The amount of resistance is selected 
as a balance between oscillation start iip and current con- 
sumption. 

[0270] The timer module 924 is composed of the system 
clock generator and circuits responsible for generating vari- 
ous timing signals. The processor IC uses the (1.048576 
MHz +500 Hz) external crystal to generate the system 
clocks. Tolerance of the crystal oscillator is be better than 
+/-500 parts per million (ppm) including the drift due to 
aging, and temperature induced variances within a range of 
-10° to 50° C 

[0271] The Timer Module 924 consists of a (A) system 
clock generator; (B) a CPU clock module; (C) a pulse 
stealer; (D) a clock enable register; (E) four independent 
timers (wake up 1, wake up 2, sleep, and one minute), and 
(f) a time-of-day timer that can be made to register time in 
subsecond intervals. 

[0272] The system clock generator module, is a 20 bit 
ripple counter that has the ability to load a pattern into its 
lower 14 bits. This counter is used to provide the system 
clocks necessary for operation of all other modules. In the 
present embodiment a pulse stealing technique is used to 
fine tune the oscillation frequency for all clock signals 
generated by this module that have a frequency of about 
8192 Hz or less. 

[0273] The clock frequency of the CPU (i.e. the frequency 
of the CPU clock) may be selected and the CPU clock made 
to stop by writing appropriate values to appropriate CPU 



clock registers. The frequency select circuit consists of two 
registers and a synchronizing circuit. The synchronizing 
circuit is used to ensure that narrow clock signals (i.e. 
glitches) are avoided when the frequency of the CPU Clock 
is changed. 

[0274] A pulse stealer circuit is provided for precise 
system timing of selected clock signals. In the present 
embodiment the pulse stealer function is applied to the clock 
signal that has a frequency that is just slightly more than 
8192 Hz target frequency as provided by the system clock 
generator. The pulse stealer circuit gives the ability to 
periodically steal pulses from a selected clock signal to 
produce a clock signal of lower and more desirable average 
frequency. In the present embodiment the pulse stolen 
signal, is used to create all system clocks that of lower 
frequency. In implementing pulse stealing for the present 
embodiment, the CPU loads a 16 bit value into two eight bit 
configuration registers. The timer whose signal is to be 
modified is used to cause a counter to count up from zero to 
the value loaded into the registers at each time a comparator 
recognizes a match. After the counter reaches the value 
specified in the registers, a single pulse is removed from the 
output signal (stolen from the output signal) to provide the 
modified output signal. Then the counting begins again from 
zero and the process is repeated over and over so that a 
modified output signal, or pulse train, having a desired 
average frequency is generated. 

[0275] A clock enable control register is provided so as to 
allow the CPU to selectively enable or disable the clock 
signals used by other modules. In the present embodiment 
these other modules include the first and second synchro- 
nous serial ports, the analog-to-digital converter, and the 
insulin pump charging circuitry. Enablement/disablement 
for a given module is "bit mapped" to the control register so 
that the control register may be used to "gale" these clocks 
on or off. 

[0276] Four system timers are provided. These timers 
provide interrupts to the CPU at selected intervals. The 
internal logic of the first three of these timers is identical 
with the exception of the input clock frequency and the 
number of bits to count to before causing an interrupt. The 
interrupt interval for each timer is programmable by the 
CPU by writing an appropriate value to an appropriately 
sized control register associated with each timer. Once an 
interrupt interval is written into the timer by the CPU, 
interrupts will be continuously generated by the timer with- 
out further intervention of the CPU. The timers continue to 
"run" independent of when or if the CPU services the 
interrupts that they create. Thus, interrupts will continue to 
be "issued" at the same programmed interval, and will stay 
asserted if not serviced. The act of servicing the interrupt 
clears the interrupt condition. The CPU clears any pending 
interrupts by writing to the associated control register. 

[0277] The first of these timers is the first wake-up timer 
and it generates a first wake up signal that based on a 1 Hz 
input clock frequency and a programmed count value that is 
to be reached before generating its interrupt signal. 
Examples of the use of this timer in the present embodiment 
include Watchdog monitoring and nominal RF reception and 
transmission start times. 

[0278] The second of these timers is the second wake-up 
timer and operates off an 8 Hz input clock frequency and is 
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also programmable to count to a specified value before 
generating its interrupt signal. Examples of the use of this 
timer in the present embodiment include various uses within 
the external communication device, including spinning the 
pumping status indicator on the display panel, IrDA timing 
for missing bytes and closing the channel, beeping, and 
keyboard blink timing. 

[0279] The third timer is the sleep timer which operates off 
a 1,024 Hz input clock frequency and is programmable to 
count to a specified value before generating its interrupt 
signal. An example of the use of this timer in the present 
embodiment includes pump stroke charging and recharging. 

[0280] The fourth timer is a one minute wake up timer and 
provides an interrupt every 60 seconds based on a 1 Hz input 
clock frequency. This counter provides two functions: (1) it 
provides the seconds portion for the time of day, and (2) it 
interrupts the CPU every 60 seconds. The principal purpose 
for the CPU writing into this timer is to adjust the software 
perception of the second number within a minute. The 
register for this timer does not hold the number to be counted 
to but instead holds the present count of the counter that 
continues to increment each second until a count of 60 is 
reached and then it starts over. Examples of the use of this 
timer in the present embodiment include counting elapsed 
minutes, performance of delivery calculations for pump 
strokes, determination of the present half hour, and one 
minute RF listening by the external communication device. 

[0281] In the present embodiment one register bit is con- 
trollable to indicate whether RF reception is given priority 
over the charging of the pump circuit for noise consider- 
ations even though there may be some negative impact on 
power drain resulting from a need to partially recharge the 
pumping circuitry after a telemetry interruption. Toward this 
end, the pump clock itself is disabled whenever an RF 
receive power signal is asserted and the priority bit is set to 
give priority to RF reception. On the other hand, when this 
bit is oppositely set, by software, then the pump clock is 
allowed to remain on regardless of telemetry activity. As 
both telemetry operations and pumping operations are cur- 
rent intensive, it may be desirable to avoid both systems 
operating simultaneous so as to reduce maximum current 
drain on the battery at any given instant in time. 

[0282] A watchdog monitor circuit 928 is provided to 
ensure that detection and system reset will occur if the CPU 
ceases to properly execute instructions. To achieve this, the 
watchdog monitor is configured to assert a system reset 
signal if an interrupt signal from the first wake-up timer 
occurs twice without the CPU properly servicing the watch- 
dog monitor. In the present embodiment, the CPU resets the 
watchdog monitor by two writes into the watchdog monitor. 
Data for the first write has first pattern and data for the 
second write has a second pattern that is different from the 
first pattern. To ensure that the system is operating properly 
at both the interrupt level and the mainline code level, one 
of the two values is written by an interrupt routine while the 
other is written by the mainline code. Writes of values other 
than the first pattern followed by the second pattern will 
reset the sequence that the Watchdog is expecting. The reset 
signal generated by the watchdog is brought out of the ASIC 
and back to the external reset input of the ASIC. 

[0283] Following a system reset or power-on reset, the 
watchdog monitor is not active. This allows the CPU time to 



perform initial configuration and housekeeping. The watch- 
dog is activated, or enabled, as soon as the CPU writes any 
data pattern to a watchdog monitor register. Once enabled, 
the watchdog cannot be disabled until another CPU reset 
occurs. The ROM boot code activates the watchdog early on 
in its execution but sets the first wake up interval to a time 
sufficient for system configuration to occur. When the 
watchdog causes a reset, a piezo signal is put out so that an 
audio alarm will sound. This piezo signal remains on until 
the CPU re-activates the Watchdog. 

[0284] The RF Module 930 in the processor IC consists of 
an (A.) RF timer circuit, (B.) a digital RF transmitter section 
that includes a QFAST® RF modulation transmitter, (C.) an 
analog receive module, (D.) a digital receive section that 
includes a QFAST® RF modulation receiver, and (E) a time 
synchronization section. 

[0285] The RF timer circuit provides clock signals used by 
the other portions of the telemetry circuitry to provide a 
carrier signal for transmission, provide a signal for modu- 
lating the carrier, provide signals for demodulating received 
signals, and the like. The primary signal timer signal is 
pulled from the system clock generator module. The gen- 
eration and shut of the primary RF timer signal is control- 
lable by hardware or software based on values that are 
written into various registers which enable signal generation 
when needed and power savings when not needed. The time 
synchronization module ensures that the concept of time as 
held by the communication device and as held by the 
medical device arc sufficiently close so as to enable RF 
communication to occur while maintaining transmission 
time and listening time of the RF hardware to a minimum. 
Further details on RF timing synchronization, autonomous 
and software activation and deactivation of telemetry hard- 
ware components are provided in the above referenced US 
patent application corresponding to Docket No. USP-1077- 
A. 

[0286] The telemetry system provides a half-duplex link 
between the implantable device and the external communi- 
cation device using a carrier frequency of about 250 kHz and 
a data signal having a frequency of about 8 kHz. The 
transmitter hardware uses the 8 kHz data signal to modulate 
the carrier signal to generate signals that will be transmitted 
by the antenna. The receive hardware receives the modu- 
lated signal and demodulates it to extract the 8 kHz data 
signal. Both the implantable device and the external com- 
munication device have transmit and receive capabilities to 
allow two-way communication. 

[0287] Most of the RF telemetry circuits necessary for 
communication between the external communication device 
and the implantable device arc implemented in the processor 
IC. In order to minimize the digital noise interference that 
the processor IC might impart to the weak RF signals that 
are being received, a high-gain RF amplifier is implemented 
off-chip. Also as discussed above, an RF antenna, that is 
used for both transmission and reception, and circuitry to 
select between reception and transmission are implemented 
off chip. The remaining analog sections and all the digital 
demodulation circuits are implemented in the processor IC. 

[0288] The RF module of the Processor IC outputs trans- 
mission signals for transmission by the external antenna. It 
also provides a power signal to the external amplifier and an 
RF receive power control signal that is used to switch 
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between a transmission configuration and a reception con- 
figuration. Both these signals are controllable by bit values 
placed into registers so that power consumption may be 
minimized when component operation is not required. The 
RF module also receives input signals from the external 
receiver hardware. 

[0289] A Quadrature Fast Acquisition Spread Spectrum 
Technique (QFAST®) is used as the modulation technique, 
QFAST® modulation is based on an Offset Quadrature 
Phase Shift Keying (QPSK) modulation technique. In this 
technique, data generated by the CPU modulates clock 
signals at the carrier frequency. As a result of quadrature 
modulation, in-phase and quadrature-phase components of 
the given data stream are generated. These two components 
are then applied to opposite ends of the external antenna so 
that a combined signal is transmitted. 

[0290] In QFAST®, data rate adaptability is accomplished 
through a spread-spectrum "coding gain" concept, with the 
spreading code being a simple clock. The modulation pro- 
duced by the QFAST® modulator can be demodulated in a 
manner which delivers both clock and data. All of the 
QFAST® modulation and demodulation circuits are digital 
and are incorporated into the processor 1C. 

[0291] The QFAST® technique provides a communica- 
tion system with the following attributes: (1) it extracts the 
clock from the received signal without a clock recovery 
loop; (2) it provides demodulation of data without phase 
ambiguity and without the requirement for synchronous 
demodulation; (3) it makes effective use of the available 
transmission bandwidth, (4) it results in fast acquisition of. 
the message signal; (5) it is relatively immune to the effects 
of highly dispersive and distorting propagation media; (6) it 
does not require regeneration of a phase -coherent local 
replica at the receiver of the transmitted carrier; (7) it does 
not require resolution of ambiguity between the in-phase and 
quadrature-phase channels in the receiver; and (8) it does not 
exhibit data phase ambiguity. 

[0292] The transmitter section of the telemetry system 
receives byte wide parallel data packets from the CPU and 
then loads the data into a parallel -to-serial shift register. The 
serial data is then sent to the QFAST® RF modulation 
transmitter section to modulate two quadrature clock signal 
components each operating with a carrier frequency of about 
218 Hz) and shifted in phase relative to each other by 90 
degrees. 'ITie two components are then delivered to opposite 
ends of the antenna. As long as there is data in the transmitter 
parallel-to-serial shift register, the RF transmitter remains 
activated. If the transmitter doesn't have data available when 
the next byte is to be transmitted the message is considered 
to have been completely transmitted and the CPU shuts off 
the transmitter circuitry so as to minimize continued power 
drain. 

[0293] External to the processor IC, the received RF signal 
is amplified by a high gain receive amplifier, A bandpass 
filter is used to attenuate out-of-band components such as 
those due to AM radio stations. The amplified RF signal then 
enters a mixer in the RF module of the processor IC and is 
converted to baseband using a two mixers, one in-phase 
mixer and one quadrature mixer both at the carrier fre- 
quency. The mixer outputs are the quadrature components of 
the baseband signals. An integrator & dump function in the 
RF module then removes the sum frequency (2fc) and high 



frequency noise (i.e. acting as a low pass filter) from each of 
the two signal components. The processed signals are then 
digitized using a comparator and passed to the demodulator 
where the data and clock are recovered. 

[0294] Further detail about QFAST® (Quadrature Fast 
Acquisition Spread Spectrum Technique) may be found in 
U.S. Pat. No. 5,559,828, entitled Transmitted Reference 
Spread Spectrum Communication Using a Single Carrier 
with Two Mutually Orthogonal Modulated Basis Vectors, by 
Armstrong, et al. 

[0295] The ASIC also includes an interrupt handler 932. 
There are nine interrupt sources. All interrupts except one 
are maskable. The only non-maskable interrupt is generated 
by the memory decoder as a result of an invalid address 
detection. The interrupt handler module consists of a capture 
module for capturing interrupt conditions, a handling mod- 
ule, and a priority encoder module. Three of the nine 
interrupts may be used for external as well as internal 
interrupt sources, as for example by the external communi- 
cation device, 

[0296] The capture module is used to capture the occur- 
rence of an interruptible event. This module contains two 
sets of registers: an enable control register (under CPU 
control), and (2) the capture register. The enable control 
register is bit mapped to each of the possible interrupt inputs. 
If the bit corresponding to an interrupt in this register is high 
the interrupt is enabled and can cause the interrupt signal to 
the CPU to be asserted. When enabled, an interrupt condi- 
tion signal sets a bit in the capture register and a corre- 
sponding interrupt signal is asserted. The bits in the Capture 
Register are de-asserted only by a system reset or individu- 
ally when a corresponding signal is asserted. The interrupt 
signals are passed to the interrupt processor module and 
combined with respect to priority to provide a single inter- 
rupt to the 8086 CPU delivered on the CPU's interrupt input 
line. 

[0297] The handling module provides the necessary logic 
to accommodate the 8086 double interrupt acknowledge 
cycle as well as daisy chaining the interrupt signals to 
provide a priority for the highest level of interrupt in cases 
where multiple interrupts arc pending simultaneously. When 
multiple interrupts are pending, the highest is serviced first. 
This is accomplished by asserting the output signal corre- 
sponding to the highest pending interrupt during the second 
CPU interrupt acknowledge cycle. This signal serves two 
purposes. First it is fed back to the capture module to clear 
the pending interrupt and second it is sent to the priority 
encoder module for encoding the interrupt vector. 

[0298] Only one of the inputs to the priority encoder 
module is asserted at a time. This module encodes the 
interrupt level number of the asserted input and generates 
the appropriate interrupt vector value. 

[0299] An analog-to-digital converter 934 (A/D) and asso- 
ciated signal multiplexer system are provided to sample 
analog signals. The analog signals for the implantable device 
include (1) battery voltage, and. (2) the charge pump voltage. 
The analog multiplexer is used to select the analog input 
signal that is to be provided to the A/D. An amplifier is used 
following the MUX to provide signal conditioning for the 
input signals. Bits are provided in a control register for 
selecting the MUX channels, for enabling the MUX, for 
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enabling the amplifier, enabling the analog to digital con- 
verter, providing a conversion status indication, providing a 
begin conversion signal, and for supplying a clock signal to 
the A/D converter. 

[0300] The LCD Clock Driver consists of two input clocks 
(e.g. about 64 kHz (e.g. 216 Hz) and about 32 kHz (e.g. 215 
Hz)), a MUX to select between them and a bit and an AND 
gate to gate the clock on and off. 

[0301] The Processor IC has an alarm driver and interface 
938 that offers direct control of a piezo buzzer alarm. The 
processor IC drives the alarm through a 2 -wire interface. 
Software may be used to select one out of 128 frequencies 
ranging from about 64 Hz to about 8192 Hz. The tone 
duration and volume are also under software control. In the 
dual -processor implantable device, the monitor processor 
controls the buzzer. The piezo buzzer logic consists of a 
register, a counter, and compare functionality to provide a 
variable frequency to the piezo buzzer. The value in the 
register is compared to the value in the counter. Each time 
the values are equal the driving signal toggles to the next 
programmed signal. Additional logic circuitry is provided to 
allow volume control for the piezo buzzer. The outputs of 
each line are used externally as differential signals to the 
piezo buzzer. Thus with this scheme, the piezo can sound 
different frequencies and the volume of the piezo buzzer can 
be controlled. 

[0302] After a processor IC reset, the piezo is driven at 
about 1024 Hz. This signal is gated with the output of a 
register bit that is under control of the CPU. The piezo signal 
is inhibited by this gate when the CPU writes into the 
watchdog enable register. 

[0303] The Processor IC has two Synchronous Serial 
Interface (SSI) ports 944 and 942. Each interface provides 
full duplex serial communication ports that operate at about 
500 kHz, One of these ports is used for inter-processor 
communication in the dual processor implantable device. In 
the external communication device, one port is used for IR 
based serial communications and the other is used as an 
interface for the LCD display panel. Each interface port 
supplies both data and clock. The clock driving the SSI may 
be enabled or disabled, thus controlling power consumption 
when the SSI is not needed. A control register is used to turn 
ON/OFF the SSI. 

[0304] The RF communication between the implantable 
device and the external communication device occurs in the 
form of messages (sometimes referred to as communication 
signals or packets) that are passed back and forth between 
the two devices. In this embodiment these messages have a 
multi-part format or protocol: (1) preamble, (2) frame sync, 
(3) telemetry identifier, and (4) data. 

[0305] For communications from the implantable device 
to the external communication device the preamble is a 
repeating pattern of "10", i.e. 10101010. This alternating 
pattern of ones and zeros is broadcast for 8-bit times. This 
pattern is considered the standard preamble pattern. 

[0306] For communications from the external communi- 
cation device to the implantable device, the preamble is 
either of the standard preamble pattern but applied for an 
extended number of bit times (e.g. 24, 48, or 96) or is of an 
attention preamble pattern that is applied for, typically, even 
a longer extended number of bit times. The attention pre- 



amble pattern is formed of a repeated pattern of "110110 . . 
. 110". In other embodiments, other attention preamble 
patterns may be used (e.g. repetitions of "011", "100", 
"001", "1011", and the like). 

[0307] The preamble, whether of the standard pattern or 
the attention pattern, is used so that the RF reception 
hardware can establish bit synchronization (i.e. bit boundary 
recognition) of the incoming data. However, the attention 
preamble is further used to get and hold the receiver's 
attention for a defined period of time. As long as the 
attention preamble is being received, the receiver's hard- 
ware will stay on and continue tracking the signal in 
anticipation of an incoming message. 

[0308] The attention preamble is considered to be lost, or 
no longer being received, when the receiver receives more 
than 2 inappropriate bit values during receipt of any 64-bits 
or when the frame sync pattern is received. 

[0309] The attention preamble may be used when there is 
some uncertainty in the time synchronization of the two 
devices. The extra length of the attention preamble allows 
the receiver's reception window to open a little latter than 
anticipated and to still have the receiver pick up the entire 
message. The extra length of the attention preamble allows 
the receiver's reception window to open earlier than antici- 
pated, so long as a minimum number of bits are heard by the 
receiver during the time its reception window is normally 
open, and still have the receiver's attention locked onto the 
preamble and have the receiver remain on as long as the 
attention preamble is being received, plus a little more, in 
anticipation of receiving a frame sync pattern. 

[0310] In the present embodiment, frame sync may actu- 
ally be considered byte sync (i.e. frames are bytes) and is a 
single byte of a selected pattern and is used so the receiver 
can obtain byte boundaries for the transmitted data. In the 
present embodiment, the selected pattern is "10110000" 

[0311] This comparison process continues so long as the 
receiver continues to listen for an incoming message or until 
a valid frame sync pattern has been received. If the receiver 
is continuing to listen beyond its normal reception window 
(i.e. listening period), due to the reception of an attention 
preamble, the listening will not stop immediately upon the 
attention preamble being lost. The comparison process for 
ascertaining the receipt of frame sync continues for a num- 
ber of bits after attention preamble is lost, even if the 
listening period has ended, as its loss may be associated with 
the partial receipt of frame sync. Once frame sync is 
received a valid frame sync signal is asserted. 

[0312] In the present embodiment, the telemetry identifier 
(i.e. telemetry ID) is a 3-byle value that is used to ensure that 
only the intended receiver receives a message. The value of 
all "1 s" indicates a universal message that is to be received 
by all receivers, otherwise the telemetry ID must be agreed 
upon between the receiver and transmitter. A unique ID is 
provided for each implantable device and each external 
communication device during manufacturing. Only the 
external communication device can transmit a message 
using the universal ID code. The telemetry IDs that the 
receiver will consider to be valid are the ID of the receiver 
or the universal ID. All other incoming bit patterns will be 
rejected with the result that the receiver will be either turned 
off or will start again looking for a valid frame sync pattern 
attention preamble. 
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[0313] If a valid telemetry ID is received, the receiver 
listens to the remaining portion of the message. 

[0314] In the present embodiment, data is provided in an 
integer number of bytes following the telemetry ID. In the 
present embodiment the first byte of the data indicates the 
message type. The first seven bits of the first byte is an 
operation code or op -code while the eighth bit is either 
ignored or is set and interpreted as a sequence number (to be 
discussed hereafter) dependent on whether or not the first 
seven bits call for a sequence number or not. Each op-code, 
based on its nature, is followed by data in a defined number 
of bytes. The specific op-code itself may dictate the number 
of bytes that follow or alternatively the specific op-code may 
dictate that the number of bytes to follow may be extracted 
from the first byte or several bytes of information that follow 
it. In alternative embodiments, op-codes may have a differ- 
ent length, or not be used at all, the message length or 
message end may be dictated in other ways. Based on the 
op-code and potentially one or more bytes following it, the 
receiver knows exactly how many more bytes of data to 
listen for. After receiving those bytes, the receiver may be 
turned off to conserve power. 

[0315] For some messages dealing with drug delivery, the 
data portion of the message may include a bolus number. 
The bolus number is similar to the sequence number in that 
it is incremented by both the implantable device and external 
communication device under controlled conditions so as to 
reduce the possibility of bolus requests being delivered more 
than once when duplicate requests may be made as a result 
of the external communication device failing to receive a 
confirmation that a previous request was received. The bolus 
number may be a single bit number in some embodiments 
but in more preferred embodiments it is a multibit number 
(e.g. 2-bit, 4-bit, 7-bit, 1-byte, or 2-bytes) so that it can take 
on more than two values thereby making it less likely that an 
error will escape detection due to received and expected 
numbers erroneously matching. The incrementing of the 
bolus number may occur within the external communication 
device when it receives confirmation that a message was 
correctly received and it may be incremented by the implant- 
able device when it correctly receives a bolus request. As 
such when a duplicate request for a bolus is received by the 
implantable device it can recognize that the expected and 
received bolus numbers do not match and that requested 
bolus is not a new request. As such the implantable device 
can respond to the repeated request that the bolus was 
correctly received and delivered (with out performing a 
second delivery and without incrementing its expectation of 
what the next bolus number will be). 

[0316] In the present embodiment, the data portion of the 
message ends with a one or 2-byte validation or error 
checking code (its type is dictated by the op-code included 
with the message). The preferred error checking code of this 
embodiment is in the form of a cyclic redundancy code 
(CRC). 

[0317] In the present embodiment, the telemetry system 
may loose bit synchronization if insufficient bit transitions 
are received per unit time (e.g. if more than about 100 to 
120-bit times lapse without receiving a transition. In order to 
ensure that a sufficient number of bit transitions occur, the 
data portion of the message, with the exception of the 
op-code is randomized prior to transmission and is de- 
randomized upon receipt. 



[0318] In order to keep power requirements low in a 
preferred implementation, the external communication 
device and implantable device attempt to maintain a com- 
mon time base, transmissions are set to start at specified 
times, and reception windows are set for specified times and 
lengths. In this way, the receiver may remain in a powered 
down mode most of the time and can turn on to listen for a 
potential incoming message at the specified times for the 
specified lengths of time. If a message is found to be 
incoming, the receiver stays on, otherwise it goes back to 
sleep (i.e. power down mode). 

[0319] In the present embodiment time synchronization 
for telemetry communication is maintained using two tech- 
niques. The first technique periodically determines the 
present difference in the concept of time (e.g. second bound- 
aries) as held by the communication device and medical 
device and the difference is used to reestablish synchroni- 
zation of the timers. In the present embodiment, reestablish- 
ment occurs on the part of the communication device each 
time it receives a valid communication from the medical 
device. 

[0320] The second technique determines a rate of drift that 
has occurred between the concept of time held by the 
communication device and that of the medical device. The 
determined rate of drift is used in combination with a 
determined lapse in time to estimate how much drift has 
occurred. This amount of drift is then used in shifting a 
listening start time or transmission start time of a first one of 
the devices to match what is believed to be the potential 
transmission period or listening period of a second one of the 
devices. 

[0321] In the present embodiment, software may be down- 
loaded from the external communication device to the 
implantable device. The downloading of software may 
include the downloading of executable software as well as 
the downloading of data structures that may be used by the 
executable software. 

[0322] In the present embodiment, a specific external 
communication device is configured/programmed to com- 
municate substantively with only one specific implantable 
device, that is in turn configured/programmed to communi- 
cate substantively with only the same specific external 
communication device. An external communication device 
is capable of retaining the telemetry ID of exactly one 
implantable device al a time and an implantable device is 
capable of retaining the telemetry ID of exactly one external 
communication device at a time. A small amount of non- 
substantive communication (i.e. communication that does 
not impact insulin delivery) can occur between external 
communication devices and implantable devices that are not 
linked (i.e. partnered or married) to one another (i.e. pro- 
vided with each others telemetry IDs). 

[0323] In the present embodiment, many different types of 
messages and responses thereto can be written into the 
programs that control the implantable device and the exter- 
nal communication device according to the guidelines set 
forth above. These messages may be used for a number of 
different purposes. For example, (1) they may be system 
level messages that are used for testing devices, for resetting 
devices, or for establishing relationships between implant- 
able devices and external communication devices, (2) they 
may be alarm messages that are used to convey alarm 
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conditions or to clear alarm conditions, (3) they may be 
miscellaneous messages that set various parameters or per- 
form various read operations, (4) they may be delivery 
messages that set delivery amounts, read delivery status, or 
set parameters such as concentration and pump stroke vol- 
ume that may be required to appropriately control delivery 
of the drug, (5) they may be data log messages that set data 
log boundaries, read boundaries, or clear data logs, bound- 
aries or read information from various data logs or supply 
information to those data logs, (5) they may be refill 
messages that are related to amounts of material that are 
added to the reservoir periodically, (7) they may be com- 
pound messages that perform more than one function, or (8) 
they may be error messages that request error condition 
status or supply error condition status. Additional preferred 
features and aspects of a telemetry system are provided in 
previously the referenced U.S. patent applications that cor- 
respond to Docket Nos. USP-1076-A, USP-1077-A, and 
USP-1079-A 

[0324] The External Communication Device (CD or ECD) 
is a hand-held device that is used to program and commu- 
nicate with an Implantable Device (ID) . The External 
Communication Device, of the present embodiment, 
includes the hardware features discussed herein above. The 
CD hardware and CD software work together to provide the 
desired functionality for the system. 

[0325] The hardware includes a display with an icon 
region and a dot matrix region, a backlight for the display, 
a Five-bufton keypad (one button is hidden), an alarm, a 
vibrator, and an IR device for serial communications with a 
second external device. The CD software is menu -driven. 
The device operates from a replaceable 1.5 Volt AA battery. 
There is a backup battery that retains memory while the 
replaceable battery is removed. 

[0326] The dot matrix region is used to display the major- 
ity of the information that is provided to the user. This 
region, however, consumes more battery power than the icon 
region, as such when the external communication device is 
idle, the dot-matrix region is powered down to conserve 
energy. If the dot-matrix region is powered down, it is 
powered back on once a key is pressed. 

[0327] The various main menu options provided to the 
user in this embodiment are depicted in the block diagram of 
FIGS, la and lb . Various set up menu options accessible 
from the pump setup menu display of FIGS, la and lb are 
depicted in the block diagram of FIGS. 8a and 8b. Various 
pump set up 11 menu options accessible from the pump 
setup 11 display of FIGS. Ha and Hb are depicted in the 
block diagram of FIGS. 9a and 9b. Various supervisor 
functions/options that are accessible from the Supervisor 
display of FIGS, la and lb are. depicted in the block 
diagram of FIGS. 10a and 106. The bolus delivery sequence 
of FIGS, la and lb is further detailed in the block diagram 
of FIG. 11. The communications sequence of FIGS, la and 
lb is further detailed in FIG. 12. In these Figures the ACT 
and SEL indications depict the keystroke necessary to 
change from one display to the next. The up-arrow symbol 
and down-arrow symbols indicate that parameter values 
within the menu display may be modified by pressing the UP 
key or the Down key. One of the icons included in the icon 
region is the low-battery icon 858 (FIG. 5) which is dis- 
played when there is a low or depleted main or backup 



battery. Another icon is the bell icon 860 (FIG. 5) which is 
turned on by the CD software when the external communi- 
cation device receives a telemetry message from the 
implantable device indicating that the implantable device 
has detected one or more for the following: (1) implantable 
device inter-processor communications failure, (2) under- 
delivery, (3) over-delivery, (4) charge time too long, (5) 
post-fire voltage too high, (6) low implantable device bat- 
tery, and (7) depleted implantable device battery. The bell 
icon is cleared by CD software when all alarm conditions 
above have been cleared. The bell icon is displayed when the 
external communication device is showing the 'time and 
alarm' screen. 

[0328] Another icon is the reservoir level indicator icon 
862 (FIG. 5). It is composed of 4 segments that provide a 
graphical indication as to the level of insulin in the implant- 
able device reservoir. The CD software maintains an esti- 
mate of the implantable device reservoir level. The estimate 
is based on the refill amount indicated at the time of the latest 
refill which is decremented by an estimate of the insulin that 
has been delivered each day. The estimate of insulin deliv- 
ered each day is derived from the daily total log that records 
the number of pump strokes delivered each day. All seg- 
ments of the reservoir level icon are set when the pump is 
refilled. The top-most segment of the reservoir level icon is 
cleared when the external communication device estimates 
that the reservoir is less than 75% full. The top two segments 
of the reservoir level icon are cleared when the external 
communication device estimates that the reservoir is less 
than 50% full. The top three segments of the reservoir level 
icon are cleared when the external communication device 
estimates that the reservoir is less than 25% full. All seg- 
ments of the reservoir level icon are cleared when the 
external communication device estimates that the reservoir 
is empty. Of course, in alternative embodiments a greater 
number, or lesser number of indicators may be used to 
convey the reservoir level. The last icon could be cleared 
when the reservoir level is not empty but instead has reached 
a predefined "low level". Alternatively, one or more of the 
elements could be controlled to blink when a low or empty 
reservoir condition exists. 

[0329] Another icon is the Insulin Delivery Icon 864 
(FIG. 5). This icon provides a rotating display when the 
external communication device estimates that insulin deliv- 
ery is in progress. The icon includes four elements each 
forming a quarter of a pie shape. The rotational appearance 
is provided by the CD software displaying alternating pat- 
terns that change every four seconds. When the external 
communication device is simulating the delivery of a bolus, 
the pattern includes three delivery segments on, and one off. 
When the external communication device is simulating the 
delivery of a basal rate, the pattern includes one delivery 
segment on, three segments off. When the external commu- 
nication device is simulating no insulin delivery, all four 
segments are on and as such, the rotational appearance is 
removed. 

[0330] Four keys on the external communication device 
are provided with raised pads and provide tactile respon- 
siveness when depressed. These four keys are labeled SEL, 
ACT, UP, and DOWN. Some general rules apply to the use 
of these keys: (1) A SEL key press moves the current screen 
option to the next screen option and does not change any 
parameter value, (2) Parameters that blink on the screen 
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change by depressing the UP or DOWN key one or more 
times or by holding down one of these keys, thereby causing 
accelerated scrolling to occur, (3) Once parameters are set to 
the desired value, they are accepted by depressing the ACT 
key. A valid ACT keystroke is accompanied by a predefined 
ACT tone that is sounded by the alarm buzzer. When the 
ACT key triggers a telemetry message to be sent to the 
implantable device, upon completion of all telemetry trans- 
actions, the external communication device emits a second 
ACT tone to indicate that telemetry is complete. 

[0331] The backlight is activated by pressing the DOWN 
key from the Time and Message* screen or the 'time & 
alarm' screen. The backlight is programmed to remain on for 
a selected period of time that may vary (e.g. 4 to 15 seconds) 
depending on the screen that is being displayed and/or the 
keys that have been pressed. For example, preprogrammed 
time is 4 seconds following the display of the 'time and 
message' screen, the 'self test results' screen, and the '24 
hour basal total' screen. The timer controlling automatic shut 
off is reset each time a key is pressed or held down so that 
the timing out of the backlight may be held off. 

[0332] The external communication device includes two 
SEEPROMs, one is used to hold CD software and data and 
the other may contain an image of the implantable device 
software. A third SEEPROM may be loaded into the external 
communication device for providing updated calibration 
parameters and the like. 

[0333] The external communication device uses the power 
management hardware to determine the battery voltage level 
for the main battery and for the backup battery. 

[0334] The external communication device includes A/D 
hardware that is used in conjunction with CD software to 
read the main battery level every hour, and to read the 
backup battery level every day at noon. The CD software 
checks the main low battery bit/signal 724 (FIG. 4b) in the 
hardware every hour to detect a dead battery. 

[0335] Upon battery removal, the external communication 
device writes data from internal RAM to external RAM to 
prepare for the hardware to put the microprocessor in the 
reset state. The data written from internal to external RAM 
includes parameters and data that are necessary for the 
external communication device to recover when the battery 
is replaced. This data is termed "external communication 
device recovery data." When the batteries are removed, the 
CD software powers down the LCD so that the screen goes 
blank and power is conserved for completion of the writing 
operation. The CD software also computes a 16-bit RAM 
sum of the external communication device recovery data, 
and stores the RAM sum and its arithmetic inverse in 
external RAM. When the battery is replaced, external com- 
munication device performs boot up operations as described 
herein later. 

[0336] The external communication device communicates 
with the implantable device through messages passed by a 
RF telemetry link. When the external communication device 
attempts to change parameters in the implantable device, the 
external communication device does not consider the param- 
eter values to have been changed unless it receives the 
appropriate telemetry response message from the implant- 
able device. The CD software verifies the CRC of all the 
telemetry messages that are received. If the calculated CRC 



does not match the CRC in the telemetry message, the 
external communication device updates a counter and oth- 
erwise ignores the receipt of the message. The CD software 
ignores all messages that were transmitted with the universal 
ID. 

[0337] When transmitting most messages, sequence num- 
bers are used. The sequence number provides a means to 
recover when the external communication device does not 
receive a telemetry response from the implantable device. 
When the external communication device sends a telemetry 
message and is expecting a response, if the response is not 
received, the external communication device has no way of 
knowing if the implantable device received the message and 
the external communication device missed the response, or 
if the implantable device simply missed the message. The 
sequence number provides a means for the implantable 
device to know whether or not it has already received a 
message and thus whether or not it should act on a message. 
When the external communication device resends a message 
(as it did not get a response from the previous message), the 
external communication device uses the same sequence 
number it used when it initially sent the message. If the 
implantable device received the previous message, the 
implantable device knows not to duplicate its actions 
because the sequence number in the current message is the 
same as the sequence number in the previous message. In 
response to the resent message, the implantable device 
resends its response packet using the same sequence num- 
ber. This mechanism allows for the retransmission of a 
telemetry message without the implantable device acting on 
the message more than once. 

[0338] The external communication device uses the 
sequence number parameter in the sync response telemetry 
message as the sequence number for the next telemetry 
message. The external communication device uses the 
sequence number parameter in the interrogate response 
telemetry message as the sequence number for the next 
telemetry message after the user has confirmed the patient 
ID by pressing ACT on the 'confirm implantable device 
serial number' screen. 

[0339] When the external communication device receives 
a valid response to a telemetry message, unless the response 
is an error message, the external communication device 
changes the sequence number. In the present embodiment 
the sequence number is a single bit and as such can take on 
the values of "1" or "0". When the Sequence Number is 0, 
it is changed to 1. Similarly, if the Sequence Number is 1, 
it is changed to 0. 

[0340] The external communication device transmits to 
the implantable device on inbound time slots. The external 
communication device enables the RF receiver every minute 
on the outbound time slot (e.g. on the second boundary after 
the minute boundary). Following the transmission of a 
telemetry packet, the CD software in the external commu- 
nication device may enable the RF receiver on the one- 
second boundary and may use a listening window size that 
is proportional to the length of the transmitted preamble. 
Alternatively, the CD software may simply enable the 
receiver and force it on for a time that is sufficient to capture 
an outbound response. The RF timing system on the external 
communication device is configured to synchronize its con- 
cept of seconds and subseconds to those of the implantable 
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device time upon receipt of each telemetry packet if the 
calculated CRC matches the CRC in the telemetry message, 
and the telemetry message is a valid response to an external 
communication device message or a valid unsolicited mes- 
sage. 

[0341] When the time between receptions is greater than 4 
minutes and less than 240 minutes, the external communi- 
cation device computes a value for a one-minute RF drift 
variable and enters RF drift mode. If the time between 
receptions is not in this range, the external communication 
device enters preamble mode. 

[0342] When the external communication device is in RF 
drift mode, the CD software updates a register, known as 
register B, by using a running RF drift value. The register B 
value may also be updated based on a predefined value or 
based on the length of the preamble so as to start transmis- 
sion a desired amount of time prior to when the external 
communication device believes the implantable device will 
open its reception window. For example, the desired amount 
of time may be from zero to up to one half the preamble 
length or more. The running RF drift value is initialized to 
zero or some other nominal value when drift mode is 
entered. When the external communication device is in RF 
drift mode, the running RF drift value is incremented by a 
one-minute drift value each minute. The one-minute drift 
value is obtained by consideration of the time between the 
previous two communications and the amount of drift that 
was detected upon receipt of the latest transmission. When 
operating in RF drift mode, the external communication 
device uses a preamble of 6 bytes. Further detail about 
register B and how the information in it is used to set 
reception times and transmission times is provided in pre- 
viously referenced U.S. patent application Ser. No. (Docket 
No. USP-1077-A) 

[0343] If after the increment, the running RF drift value is 
out of range, the external communication device enters 
attention mode. When in attention mode, the external com- 
munication device transmits using a two-second preamble of 
the attention pattern and initiates transmission using the 
maximum B Register value. This use of the maximum value 
in the B register is selected in hope of missing the reception 
window of the implantable device when the transmission is 
first initiated and in the hope of catching the attention of the 
implantable device closer to the end of the transmission, thus 
minimizing the time that the implantable device's reception 
system is forced to remain powered up. 

[0344] When the external communication device is in 
preamble mode, the CD software maintains a running num- 
ber of preamble bytes variable. This variable is initially set 
to a desired minimum value (e.g. 4, 6, or 8 bytes) and is 
incremented by a desired incremental value (e.g. 1-4 byte) 
each minute since the last communication occurred and is 
transmitted using the attention preamble pattern. When the 
external communication device is in preamble mode, the 
external communication device sets the register B value so 
that the preamble is centered on the telemetry second 
boundary as determined by the external communication 
device. When in the preamble mode, and when the running 
number of preamble bytes exceeds a predefined maximum 
value (e.g. 256-512 bytes), the external communication 
device enters attention mode. 

[0345] In alternative embodiments, other decision-making 
processes may be used to select between the use of preamble 



mode, RF drift mode or attention mode. In fact, other modes 
may be defined such as a combined preamble and drift mode 
that widens the preamble length as time passes since the 
previous communication and also uses a drift rate to repo- 
sition the transmission window to keep it targeted to what 
the external communication device believes is the most 
likely position of the reception window on the implantable 
device. 

[0346] The external communication device initiates com- 
munication with the implantable device by sending a telem- 
etry message. If there is no response from the implantable 
device within a predefined time that is set by the CD 
software, or if the CRC of the received message does not 
match the CRC as calculated by the CD software, the CD 
software causes the packet to be resent. The CD software 
sets the preamble of this second packet to be twice as long 
as that used by the former packet but no longer than two 
seconds. The second message may be termed a retry packet. 
If the retry packet fails, the CD software initiates another 
retry but this time using a two-second preamble. If the 
external communication device docs not receive a response 
to the second retry message, or if the response CRC does not 
match the calculated CRC, the CD software reports a no 
response error. 

[0347] When the no response error is acknowledged by the 
user, the CD software sets aside the original message and a 
sync message is prepared and sent using an attention pre- 
amble that spans the gap that is believed to exist between 
successive reception windows (e.g. 2 seconds). If a response 
is still not received, the CD software may automatically (and 
without user notification) resend the sync message again up 
to a predefined number of times (e.g. 0-3 times). If a 
response has not been received, the no response error is 
again displayed. This process is repeated each time the error 
is cleared. 

[0348] If a valid response is eventually received, and if the 
message was not an insulin delivery request, the CD soft- 
ware then retransmits the original message using a sequence 
number as provided in the sync response message. If the 
original message was for an insulin request, the user may 
check the delivery logs that were updated in conjunction 
with the last sync response message to determine whether or 
not the previous delivery was acted upon and thus whether 
or not it is appropriate to prepare a new delivery request. 

[0349] If no valid response is received, the external com- 
munication device is locked out from performing any other 
operations other than continued attempts to reestablish com- 
munication. After taking appropriate steps to increase the 
likelihood of a successful communication without success, 
the user may elect to reset the external communication 
device and program it to send an interrogate message which 
will initially be sent with a preamble that spans the entire 
period between successive reception windows that exist 
when the implantable device is in normal mode. If this fails 
to achieve communication, the CD software automatically, 
and without user notification, resends the interrogate mes- 
sage using a preamble that spans the entire period between 
successive reception windows when the implantable device 
is in storage mode. 

[0350] When telemetry is initiated by the external com- 
munication device, the CD software controls the external 
communication device to display the "transmitting to 
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implantable device" screen so as to present the user with a 
positive visual feedback that the external communication 
device is attempting to communicate the required telemetry 
commands. 

[0351] If a response is received from the implantable 
device, the acceptability of the response is verified by CD 
software. If the response is incorrect, or the response is not 
detected, the above noted no response error is asserted after 
making the multiple initial attempts to establish communi- 
cation. 

[0352] The external communication device recognizes a 
number of different types of alarms and conditions. The 
various alarms and conditions are defined with an alarm 
description, siren, alarm origin, and a display definition for 
three message areas on the dot matrix portion of the display. 
The siren indicates whether a yellow (Y) or blue (B) siren 
will be used when the alarm is active. The alarm origin 
indicates if the alarm is generated from a condition associ- 
ated with the external communication device or with the 
implantable device. An alarm code is specified for a number 
of the potential alarm conditions. This is a unique number 
for each alarm condition and is used to identify the alarm in 
the error log and on the display. 

[0353] When the CD software recognizes an alarm con- 
dition originating from the implantable device (received 
through telemetry), the CD software activates a siren and 
displays a message on the dot matrix display. The message 
is displayed on the 'time & alarm' screen and the siren is 
initiated immediately. The CD software cancels any active 
user interactions. When the alarm is acknowledged by the 
user, (e.g. by pressing the SEL key followed by the ACT 
key), the CD software prepares a telemetry message to clear 
the active implantable device alarm and to request an update 
of the error log. If multiple alarms arc present, they are 
presented one at a time in prioritized order and each one may 
be acknowledged, cleared, and the log updated according to 
the above noted process. After clearing the alarms, the 
processing that was in progress when the alarm conditions 
are asserted is allowed to continue in most cases. In alter- 



native embodiments, multiple alarm conditions may be 
displayed simultaneously and cleared simultaneously, or 
they may reviewed in turn and then cleared simultaneously. 

[0354] The purpose of alarm conditions is to get the user's 
attention as soon as possible under most conditions. Excep- 
tions are stop pump, suspend pump, and implantable device 
auto off as these conditions are system states that are cleared 
when the user presses SEL and ACT. As the system gener- 
ally attempts to initiate alarm conditions on the external 
communication device first to save power in the implantable 
device, since telemetry transmissions are less power con- 
sumptive than buzzer activations, minimizing the duration 
of the alarm condition on the external communication device 
result in reducing the possibility of the Implantable Device 
alarming internally. 

[0355] Reassertion of implantable device alarms are 
dependent on the alarm condition not being removed (i.e. the 
condition has not been- cleared though its existence was 
previously acknowledged) by the time reassertion is to occur 
and on the implantable device communicating the error to 
the external communication device, Reassertion results in 
the alarm condition again being displayed on the LCD and 
the siren being activated and requiring that the use acknowl- 
edge the alarm. 

[0356] The CD software handles external communication 
device alarms in much the same manner that it handles 
implantable device alarm conditions with the exception that 
telemetry packets need not be prepared and sent to acknowl- 
edge the alarm conditions. Reassertion of external commu- 
nication device alarm conditions is similar to that for reas- 
sertion of Implantable Device alarm conditions in that they 
also result in a new alarm condition on the external com- 
munication device which the user must acknowledge. The 
exceptions to this rule arc temporary basal rate, delivering 
diagnostic rate, and delivering priming bolus which are 
system states that require the external communication device 
to beep periodically. The following Table depicts the various 
alarm conditions that are recognized in the present embodi- 
ment in order of priority. 



Alarm Conditions 



P Alarm Description 


O 


S 


Messages O-l 


M2AC 


1 MAIN_BATTERY_DEPLETED 


CD 


Y 


CD - DEPLETED BATT 




2 MAIN__BATTERY_LOW 


CD 


Y 


CD - LOW BATTERY 




3 BACK__UP„BATTERY_LOW 


CD 


Y 


CD - NEEDS SERVICE 




4 NO„ R ES PONS E_E VENT 


CD 


Y 


TELEMETRY - COMM ERROR 


3 


5 1D_DEAD_BATTERY 


ID 


Y 


PUMP STOPPED 


6 


6 ID_EMPTY_RESERVOIR 


ID 


Y 


EMPTY - RESERVOIR 




7 ID_0 VE R_DELIVE R Y_ERRO R_BIT 


ID 


Y 


PUMP STOPPED 


4 


8 ID_UNDER_DELlVERY_ERROR 


ID 


Y 


PUMP STOPPED 


5 


9 ID_IP_COMM_ERROR 


ID 


Y 


PUMP STOPPED 


1 


10 ID_CHARGE_TIME_TOO_LONG 


ID 


Y 


PUMP STOPPED 


2 


11 ID_POST_FTRE__VOLTAGE_TOO_HTGH 


ID 


Y 


PUMP STOPPED 


3 


12 ID_AUlX)_OFF_INTERVAL_EXCE ED E D 


ID 


Y 


AUTO OFF - PUMP SUSPENDED 




13 ID„LOW_RESERVOIR 


ID 


Y 


LOW - RESERVOIR 




14 I D_LOW_B ATTERY 


ID 


Y 


PUMP - LOW BATTERY 




15 APPLICATION_VERSlON_ERROR_EVENT 


CD 


Y 


PUMP - ERROR 


0 


16 TELEMETRY_ VERS ION_ERROR_E VENT 


CD 


Y 


PUMP - ERROR 


1 


17 INVALID CONCENTRATION 


CD 


Y 


PUMP - ERROR 


40 


18 INVALID STROKE VOLUME 


CD 


Y 


PUMP - ERROR 


41 


19 EXCLUSION_LIST_FULL 


CD 


Y 


TELEMETRY - COMM ERROR 


20 


20 STOP_PUMP_ALARM 


CD 


B 


PUMP STOPPED 
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-continued 



Alarm Conditions 



P Alarm Description O S Messages 0-1 \ M2AC 



21 SUSPEND__ALARM 

22 DOWNLOAD COMPLETE 

23 DO WNLO AD__FAILU RE 

24 UNINrnALIZED_CD„EVENT 

25 ID_RESET_TO_DEFAULTS 

26 CHECK_PUMP_STATUS 

27 HOURLY_MAXIMUM_EVENT 
27 ro„INrriALIZED 

29 ID_SELF_TEST_ERROR 

30 AUTO_OFF_ALARM 



CD B PUMP SUSPENDED 

CD Y DOWNLOAD - COMPLETE 

CD Y TELEMETRY - COMM ERROR 

CD Y CD - NOT INITIALIZED 

CD Y PUMP - RESET 

CD Y CHECK - PUMP STATUS 

CD Y HOURLY MAX - EXCEEDED 

CD Y PUMP - INITIALIZED 

CD Y PUMP - SELF TEST FAIL 

CD Y AUTO OFF - IN 5 MIN 



27 



Where P » Priority, O « Origin, S = Siren, and M2AC = Message 2 Alarm Code 



[0357] When the text in Messages 0-1 do uniquely define 
an alarm condition, an Alarm Code is additionally displayed 
as a numeral that indicates the specific cause of the alarm 
condition. 

[0358] The CD software records all external communica- 
tion device alarms in the external communication device 
system events log. 

[0359] If the low battery voltage signal is active, the CD 
software initiates a CD battery low alarm. A low battery 
message will persist on the "Time and Message" screen until 
the battery has been replaced. In alternative embodiments, 
instead of constantly displaying this condition and thus 
keeping the dot matrix powered continuously, the existence 
of this condition may only be displayed for limited times. 
For example, it may be displayed when the user first 
interacts with the device after a time out period, or it may 
also be displayed after various commands are given. If the 
external communication device is not recognizing a dead 
battery condition, the CD software initiates a low battery 
condition check every hour. When the low battery condition 
is detected, the CD software logs the event, 

[0360] If the dead battery voltage signal is active, the CD 
software initiates a CD Main Battery Depleted alarm. The 
CD software causes a depleted battery message to persist on 
the "Time and Message" screen until the battery is replaced. 
When the depleted main battery condition is detected, the 
CD software logs the event. 

[0361] The CD software causes the voltage of the backup 
battery to be checked every day. If the battery voltage is loo 
low, then the external communication device needs to be 
refurbished. The CD software also checks for the depleted 
backup battery condition every day. When the depleted 
backup battery condition is detected, the CD software causes 
the depleted backup battery message to be displayed on the 
'time and message 1 screen and logs the event. Though the 
user may clear the alarm, the depleted backup battery 
message continues to be displayed on the 'Time and Mes- 
sage 1 screen until refurbishing occurs. 

[0362] When an alarm is displayed, the external commu- 
nication device 'Time and Alarm* screen is active, and the 
user must clear the display. In the present embodiment, this 
is accomplished by pressing the SEL key and then the ACT 
key for alarms generated by the external communication 
device. This is initiated by pressing the SEL key and then the 
ACT key for alarms generated by the Implantable Device. 



[0363] When an implantable device alarm is cleared by the 
user, the CD software prepares a clear alarm telemetry 
message that is transmitted to the implantable device. Upon 
receipt of the response, the CD software clears the active 
alarm condition that is displayed to the user. The CD 
software also re-prioritizes its alarm conditions. If there are 
any outstanding errors, the CD software causes the one with 
the highest priority to be displayed and the external com- 
munication device remains in an error state. The process of 
displaying, clearing, and reprioritizing continues until there 
are no more outstanding errors. If the alarm was detected 
during a telemetry transaction, the CD software resumes the 
telemetry transaction. However, if the alarm notification 
from the Implantable Device to the external communication 
device occurs as a result of one of the messages transmitted 
as part of the external communication device to Implantable 
Device initialization process (i.e. marrying process) the 
initialization process is not resumed but must be restarted 
beginning with the Interrogate Message. 

[0364] The CD software is configured to periodically write 
to the watchdog hardware registers. If the system watchdog 
requirements are not met, a watchdog alarm is triggered and 
the watchdog tone is enabled by the hardware. An infinite 
loop at mainline or an infinite loop at interrupt level will 
cause the watchdog to reset the processor IC as the CD 
software must write one of a 0x5 B or a OAS to the watchdog 
register in mainline code and the other at interrupt level. 

[0365] Sirens (either audio alarm or vibrational alarm) are 
activated by the CD software when the external communi- 
cation device detects an alarm condition. Sirens are deacti- 
vated by CD software when the alarm condition is cleared by 
the user. There are two types of sirens, yellow sirens and 
blue sirens. For yellow sirens, when the alarm type is set to 
'vibrator/ the CD software activates the vibrator for 3 
seconds every minute while the yellow siren is active. When 
the alarm type is not set to 'vibrator/ the CD software 
initiates a high beep tone 6 times with 250 ms between each 
beep, every minute while the yellow siren is active. If the 
yellow siren is active for more than 30 minutes, (user does 
not acknowledge the alarm within 30 minutes), the CD 
software sets the alarm type to high and initiates an alert tone 
every minute until the yellow siren is deactivated. If the 
alarm type was set to vibrator prior to crossing the 30-minute 
threshold, the alarm type is converted to high (i.e. loud v 
audio) at the 30-minute threshold. 
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[0366] For the blue sirens, when the external communi- 
cation device alarm type is set to 'vibrator,' the CD software 
will activate the vibrator for 3 seconds every 30 minutes 
while the blue siren is active. When the external communi- 
cation device alarm type is not set to * vibrator,* the CD 
software initiates a high beep tone 3 times with 250 ms 
between each beep, every 30 minutes while the blue siren is 
active. 

[0367] The frequency and durations for the types of 
sounds generated by the tone generator are listed in the 
following table. 



Tone Frequencies 



Tone 


Duration 


Frequency 


Repeat Number 


ACT Tone 


125 ms 


516 Hz 


1 


High Beep Tone 


250 ms 


941 Hz 


1 


Audio Bolus Tone 1 


250 ms 


516 Hz 


1 


Audio Bolus Tone 2 


250 ms 


592 Hz 


1 


Audio Bolus Tone 3 


250 ms 


667 Hz 


1 


Audio Bolus Tone 4 


250 ms 


696 Hz 


1 


Double Audio Bolus 


250 ms 


516 Hz 


2 with 125 ms 


Tone 1 






delay between 


Double Audio Bolus 


250 ms 


592 Hz 


2 with 125 ms 


Tone 2 






delay between 


Double Audio Bolus 


250 ms 


667 Hz 


2 with 125 ms 


Tone 3 






delay between 


Double Audio Bolus 


250 ms 


- 696 Hz 


2 with 125 ms 


Tone 4 






delay between 


No Action Tone 


500 ms 


380 Hz 


1 


Alert Tone 


250 ms each 


941 Hz followed 


6 






by 516 Hz 




Alarm Tone 


250 ms each 


941 Hz followed 


50 






by 516 Hz 




End Bolus Tone 


250 ms 


444 Hz 


1 



[0372] When loading of the software is complete, the 
external communication device application code is started 
by an inter-segment jump to the main external RAM ini- 
tialization address location. 

[0373] Before performing conversions between insulin 
units and pump strokes, the CD software compares the 
stroke volume variable to its compliment form. If they do 
not agree, the CD software causes the external communi- 
cation device to be reset. 

[0374] Before performing conversions, the CD software 
compares the insulin concentration variable to its compli- 
ment form. If they do not agree, the CD software causes the 
external communication device to reset. 

[0375] The CD software causes the external communica- 
tion device to display insulin quantities to the user based on 
one more selected predefined units of resolution (e.g. 0,2 
units for bolus quantities and 0,1 units for basal quantities). 
However, most computations performed by both the 
implantable device and the external communication device 
involve pump stroke volumes. In the present embodiment, 
the pump stroke volume is nominally 0.5 actually pump 
stroke volume may vary from this amount. When using U 
400 insulin with a nominal stroke volume of 0.5 a 
dispensing resolution of nominally 0.2 units of insulin 
results. However, since the stroke volume may vary, the 
actual dispensing resolution may also vary. As such pro- 
gramming and interfacing between the user and device occur 
in increments that are not necessarily integer values of the 
pump stroke volume. 

[0376] The CD software converts units to pump strokes 
based on the insulin concentration and the stroke volume: 



[0368] ROM boot code within the processor IC loads the 
external communication device bootloader code from the 
SEEPROM and factory defined parameters. When the exter- 
nal communication device boots, CD software reads the 
power down recovery data from external RAM and calcu- 
lates the power down recovery data checksum by perform- 
ing a 16-bit sum with the carry of the data. The CD software 
calculates the power down recovery data checksum inverse 
by performing an arithmetic inverse of the power down 
recovery data checksum. 

[0369] If the calculated power down recovery data check- 
sum matches the value in external RAM, and if the calcu- 
lated power down recovery data checksum inverse matches 
the value in external RAM, the bootloader code copies the 
CD software (i.e. application code) from external RAM into 
internal RAM, 

[0370] If the calculated checksum or checksum inverse do 
not match the values in external RAM, the external com- 
munication device loads the application code into external 
RAM from the SEEPROM. Once application code is resi- 
dent in external memory, the internal portion of the code is 
copied from external memory to internal memory. 

[0371] If the select, up, down, and activate keys are all 
depressed at power-up, the external communication device 
loads the application code into external RAM from the 
SEEPROM. Once the application code is resident in 
memory, the internal code portion is copied from external 
memory to internal memory. 



PumpStrokes = 



Units(t/)*1000(^) 



Concentration^ y SrrokeVolume[vL) 



[0377] The CD software converts pump strokes to units 
based on the insulin concentration and the stroke volume: 



Units = - 



/ U X 

Concentration^ — J • Stroke Volume{uL) 



1M0 (£) 



x Pump Strokes 



[0378] For display, the CD software rounds to units to the 
nearest 0.2 unit boundary for each Bolus and to 0.1 units for 
basal rates. All logs however, are maintained in pump stroke 
units and then converted to appropriate insulin units when 
displayed 

[0379] Suspend mode is a mode where the implantable 
device is programmed to deliver at a rate of one pump stroke 
an hour. The rate is clinically insignificant and serves to 
prevent catheter blockage. Suspend mode is enabled by the 
CD software from the 'suspend pump' screen. When sus- 
pend mode is entered, the CD software prepares a telemetry 
message for transmission to the implantable device to set its 
delivery mode to "suspend". When the implantable device is 
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in suspend mode, the CD software causes the display the 
alarm screen to display the "pump suspended" alarm as 
active. When the "pump suspended" alarm condition is 
cleared, the CD software prepares a message for transmis- 
sion to the implantable device to set the implantable device 
delivery mode to "normal". When the "pump suspended" 
alarm condition is cleared, the CD software determines if a 
bolus was interrupted when suspend mode was entered. If 
so, it updates the bolus history log to indicate the amount of 
the bolus that was delivered. The CD software only provides 
access to the Supervisor Menu Screens while the pump is in 
suspend mode, A block diagram of the supervisor menu 
screens and options is provided in FIG. 10. 

[0380] An audio bolus option is provided that enables the 
user to safely and reliably deliver a bolus without looking at 
the display. The CD software enables and disables this 
option from the Audio Bolus Screen in the setup menu. A 
block diagram of the set up menu screens and options is 
provided in FIG. 8. When audio bolus status is ON, the CD 
software enables the user to initiate delivery of a bolus by 
pressing the up arrow key from the 'time and message' 
screen as well as the 'time' screen. The CD software causes 
the external communication device to beep and the bolus 
increment to be displayed as when the up key is first 
depressed. The CD software provides no scrolling effect 
when a key is held down. The CD software increases the 
amount displayed by the bolus increment amount and beeps 
with each subsequent press of the up key. 

[0381] In order to audibly distinguish bolus increments, 
when using the audio bolus feature, the CD software pro- 
vides a single tone beep when the increment amount is set 
to 0.4 U, and a double tone beep when the increment value 
is set to 0.8 U. Of course, in alternative embodiments other 
incremental amounts may be used and different audio sig- 
nals used to indicate which is active and what increments 
have been made. In one such alternative, the CD software 
could control an appropriately configured external commu- 
nication device to speak to the user. In another such alter- 
native, the CD software could provide voice recognition 
features to an appropriately configured the external commu- 
nication device so that commands could be spoken instead 
of keyed in. 

[0382] In the present embodiment, the CD software facili- 
tates counting the audio bolus increments by varying the 
audio tones for the beeps that accompany the Up arrow key 
presses. The CD software provides four frequencies that are 
used in a repeating sequence as the UP arrow key is 
repeatedly pressed until the desired bolus amount is 
selected. During the programming of the audio bolus 
amount, the CD software interprets a pressing of the down 
key and sel keys to cancel the bolus. When the desired bolus 
amount has been programmed (and is displayed), the user 
may activate it by pressing the act key. When the act key is 
pressed and the amount is not zero, the CD software causes 
the external communication device to play back the beep 
sequence generated during bolus amount selection. The CD 
software interprets a subsequent pressing of the ACT key, as 
confirmation that the user wants to have the programmed 
amount delivered and as such displays the 'immediate bolus 
confirmation' screen. The CD software prepares a bolus 
delivery message for transmission to the implantable device 
after the user confirms the bolus amount selection by press- 
ing the ACT key again. To cancel the delivery of the bolus 



after an amount has been set or while the confirmation 
screen is being displayed, the user may either allow the CD 
software to time-out and return to the 'time and message* 
screen or the user may press any key other than the act key. 

[0383] When the delivery of an audio bolus is canceled, 
the CD software causes the 'time and message* screen to be 
displayed and causes a no action tone to be emitted. The CD 
software stores the audio bolus status and audio bolus 
increment parameters in the external communication device 
data block. 

[0384] The CD software enables the external communi- 
cation device to request delivery of three types of boluses. 
These are the normal bolus, the square wave bolus and the 
dual-phase bolus. 

[0385] The normal bolus (immediate bolus or phase 1 
bolus) gives the user the option to program a bolus amount 
in units of insulin. The insulin units requested for delivery 
are translated by the external communication device to an 
integer number of pump strokes, a telemetry message is 
prepared and transmitted to the implantable device which 
then delivers the amount. 

[0386] The square wave bolus (phase 2 bolus) is pro- 
grammed as an amount in units and a duration. The CD 
software translates the amount into a rate, a telemetry 
message is prepared and transmitted to the Implantable 
Device which then delivers insulin the computed rate for the 
given duration. 

[0387] The dual phase bolus (two-phase bolus) is a com- 
bination of the normal bolus and the square wave bolus. The 
user programs a phase-one amount, a phase-two amount, 
and a phase-two duration into the CD software. The phase 
one amount is treated like a normal bolus. The phase -two 
amount and duration are treated like a square wave, A 
telemetry message is prepared and transmitted to the 
implantable device which is then programmed to deliver the 
two components of the bolus. 

[0388] When a parameter called variable bolus status is set 
to OFF, the only type of bolus delivery that can be pro- 
grammed is the normal bolus. The CD software presents the 
user with a 'set bolus amount' screen that the user may 
interact with to program a normal bolus. The CD software 
allows the user to increment up and down through allowable 
bolus amounts by using the up and down keys. The maxi- 
mum amount that can be scrolled to is equal to program- 
mable maximum bolus quantity. The CD software displays 
the 'immediate bolus confirmation' screen when the user 
depresses the act key (so long as the bolus amount indicated 
is not zero). When the act key is pressed again, the CD 
software prepares a bolus delivery request message for 
transmission to the implantable device. 

[0389] The CD software allows a Square Wave bolus to be 
programmed when the variable bolus status is set ON. From 
the set bolus display, the CD software enables the user to 
select, intra alia, a square wave bolus. Once selected, the CD 
software shows the user a 'set bolus amount* screen with 
portion of the display blinking indicating that an amount 
may be entered. A desired bolus amount may be entered by 
the user using the up and down keys. The CD software limits 
the amount that may be entered to the predefined maximum 
bolus amount. After entering the amount and pressing the act 
key, the CD software displays a blinking region for setting 
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bolus duration. After entering the desired duration and 
depressing the act key, the CD software displays a blinking 
screen that shows the details of the extended bolus that has 
been programmed (i.e. 'Extended Bolus Confirmation 1 
screen). If the user agrees that a delivery having the indi- 
cated details should be made, the CD software initiates a 
telemetry delivery request message when the act key is 
pressed again 

[0390] The CD software also allows a dual bolus to be 
programmed when the variable bolus status is set on and the 
bolus delivery type is set to dual. In programming the bolus, 
three screens are presented to the user one after the other: (1) 
the 'set bolus amount* screen is displayed for entry of the 
immediate portion of the bolus, (2) the 'set phase 2 amount* 
is displayed for entry of the square wave portion of the 
bolus, and (3) the 'set phase 2 duration* screen is displayed 
for entry of the square wave duration. The user progresses 
through these screens by entering the desired amount as each 
screen is displayed and then hitting the act key. After the act 
key is depressed while the 'set phase 2 duration* screen is 
displayed, a flashing the 'Extended Bolus Confirmation* 
screen is shown. If the user agrees that a delivery having the 
indicated details should be made, the CD software initiates 
a telemetry delivery request message when the act key is 
pressed again. The CD software limits the total bolus 
amount programmed for the combination of the Immediate 
and the phase-2 boluses to be no more than the predefined 
maximum bolus amount. 

[0391] For each of the above three cases, bolus delivery is 
initiated by the CD software preparing and initiating a 
deliver bolus, read totals telemetry packet. The CD software 
calculates the number of pumps to be delivered in the 
immediate bolus based on the amount programmed with the 
result rounded to the nearest integral number of pump 
strokes. The CD software also uses the phase -2 amount and 
duration to calculate a phase-2 delivery rate in pump strokes 
per minute. The calculated amount, rate and duration are 
passed to the implantable device for delivery in the above 
noted delivery request message. When the CD software 
estimates that a bolus delivery is in progress, the rotating 
delivery status icon indicates that a delivery is in progress 
and 'time and message* screen provides a delivering bolus 
message and an estimate of the amount delivered. 

[0392] The CD software, estimates the amount delivered 
in the immediate phase of a bolus to be one pump stroke 
during each predefined interval of time (e.g. 2-4 seconds). 
Incrementing starts on the minute following completion of 
bolus programming. 

[0393] The CD software disables the 'set maximums' 
screen during delivery of a bolus. Also when the estimate of 
the immediate amount delivered is less than the programmed 
amount, the 'set bolus amount' screen is also disabled. When 
the estimate of the immediate amount delivered equals the 
programmed amount, the 'set bolus amount* screen is 
enabled. When the estimated delivery of the combined 
amounts (immediate and extended) is complete the CD 
software causes the external communication device to emit 
an end of bolus tone. The CD software inhibits entry of an 
additional extended bolus delivery when an extended bolus 
is already in progress. The CD software locks out all bolus 
delivery screens during the delivery of an immediate bolus, 
diagnostic rate, or primary bolus. 



[0394] As noted above, a variable bolus rate option in 
provided. A variable bolus status parameter is also provided 
that is indicative of whether the user has the capability of 
entering delivery instructions for all three bolus types or 
only the immediate type. When the option is on, bolus 
delivery includes a screen to choose the bolus type. When 
the option is off, the user can only program normal boluses. 
In either event, the CD software provides the user with 
access to those screens and options that are available to 
him/her and removes access/display of those screens that 
provide programming capability for the unavailable options. 

[0395] The CD software provides a 'variable bolus* screen 
that may be used to set the variable bolus status parameter 
to on and off for enabling the programming of square wave 
boluses and dual wave boluses. The CD software causes the 
variable bolus status parameter to be stored in the external 
communication device data block. 

[0396] The CD software provides the user with the capa- 
bility of displaying the time of delivery and the amount for 
each of the most recent 512 boluses. Priming boluses are 
displayed along with variable and audio boluses. The CD 
software provides a 'bolus history* screen that display the 
most recently delivered or programmed bolus. The older 
entries in the bolus history log are displayed when the down 
arrow is pressed. Newer entries in the bolus history log are 
displayed when the up arrow is pressed. The up arrow is 
ignored when the external communication device is display- 
ing the most recent bolus. The CD software ignores any 
down key presses when the external communication device 
is displaying the oldest log entry. When a bolus is pro- 
grammed, the CD software sets the bolus status parameter to 
'programmed*. The CD software updates the bolus history 
log when the response to the deliver bolus read totals 
telemetry packet is received. The CD software blanks a 
bolus status parameter when a response to a deliver bolus 
read totals telemetry packet indicates that the amount dis- 
played for the most recently programmed bolus was deliv- 
ered. 

[0397] The CD software provides the user with the ability 
to display the total amount of insulin delivered during each 
of the most recent 120 days on a 'daily totals* screen. The 
amount for the current day is only accurate up through the 
delivery of the previous bolus, not the current bolus, or the 
last bolus. The CD software retains the total basal delivery 
and the total bolus delivery as separate amounts for each day 
in the daily totals log. The CD software displays older 
entries in the daily total log when the down arrow is pressed. 
The CD software displays newer entries in the daily total log 
when the up arrow is pressed. The CD software ignores Up 
key presses when the most recent entry in the daily total log 
is displayed and ignores the down key presses when the 
oldest daily total log entry is displayed. The CD software 
updates the Daily Totals log using the current day's total and 
yesterday's total from the TM message, when a response to 
the Deliver Bolus, Read Totals telemetry packet is received. 
The CD software maintains a pointer that indicates "today** 
in the daily total log. The CD software increments this 
pointer at midnight. When the CD software increments the 
pointer indicating "today", the daily total for the new day is 
set to dashes. 

[0398] The CD software provides the user with the ability 
to display the contents of the external communication device 
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event log on a External communication device clinical 
history' screen. The most recent event code for the most 
recently logged external communication device event is 
displayed on the screen. The CD software displays older 
entries in the external communication device event log when 
the down arrow is pressed and newer entries in the external 
communication device event log when the up arrow is 
pressed. The CD software ignores up arrow key presses 
when the external communication device is displaying the 
most recent entry in the external communication device 
event log and ignores down key presses when the external 
communication device is displaying the oldest entry in the 
external communication device event log. The CD software 
maintains a pointer to the most recent entry in the external 
communication device event log. 

[0399] The CD software provides memory space for stor- 
ing the contents of the implantable device event log and the 
ability to display those events on an 'implantable device 
clinical history' screen. The event code for the most recently 
logged implantable device event is initially displayed on the 
screen. The CD software displays older entries in the 
implantable device event log when the down arrow is 
pressed and newer entries in the implantable device event 
log when the up arrow is pressed. The CD software ignores 
up key presses when the external communication device is 
displaying the most recent entry in the implantable device 
event log and down key presses when the external commu- 
nication device is displaying the oldest entry in the implant- 
able device event log. The CD software maintains a pointer 
to the most recent entry in the implantable device Event Log. 
The CD software updates its implantable device event log to 
match the event log in the implantable device during a link 
and when executing the read implantable device data func- 
tionality, 

[0400] The CD software provides memory space for stor- 
ing entries to the implantable device battery voltage log and 
the ability to display those entries on an implantable device 
voltage history screen. The CD software initially displays 
the most recently logged loaded and unloaded implantable 
device battery voltages on this screen. The CD software 
displays the older entries in this log when the down arrow is 
pressed and newer entries in this log when the up arrow is 
pressed. The CD software ignores the pressing of the up key 
when the most recent entry in the log is being displayed and 
the down key when the oldest entry in the log is displayed. 

[0401] The external communication device maintains a 
pointer to the most recent entry in the implantable device 
battery voltage log. The CD software updates this log to 
match the battery voltage log in the implantable device 
during a link and when executing the read implantable 
device data feature. 

[0402] The CD software provides for a predefined number 
(e.g. 3 in the present embodiment) of separately program- 
mable sets of basal rates. Each set, or profile, consists of a 
predefined number (e.g. up to 48 in the present embodiment) 
of basal rates, one for each of a predefined set of time slots 
(e.g. each half-hour of the day in the present embodiment). 
The profile rates are programmed by setting a start time and 
a rate. The CD software provides a basal rate screen that 
allows the user to view the basal rale that is currently being 
delivered. When there is no temporary basal rate active (the 
temporary basal duration is zero), the CD software displays 



the currently active basal profile along with its number. 
When a temporary basal rate is active, the active profile 
number is replaced with "OFF". 

[0403] The CD software displays the set profile rate screen 
showing profile 1 when act is pressed when the 'basal rate' 
screen is displayed when the act key is pressed from the set 
profile rate screen, the CD software displays the set profile 
start time screen. The minimum value for scrolling the start 
time is one half-hour after the start time of the previous 
profile. When a profile start time is programmed with a start 
time prior to that of one or more previously defined entries 
and subsequent start times arc cleared (e.g. set to dashes in 
the present embodiment). Basal profile setting is complete 
when the rate for a profile starting at 11:30 pm is set. 
Alternatively, basal profile setting is completed when the 
user presses the act key for a profile start time that is dashes. 
When profiles in the active pattern are changed, the CD 
software prepares and sends a set profile basal rates message 
to the implantable device, 

[0404] The CD software allows up to 3 delivery patterns 
to be separately programmed with up to 48 rates each and 
the patterns to be stored in the external communication 
device. Any one of the patterns may be set active at any time. 
The CD software allows the Selection of the active basal 
delivery pattern from the set basal delivery pattern screen. 
When the basal delivery pattern is set (i.e. made active) that 
pattern becomes accessible on the 'profile basal rate* screen 
and a set profile basal rates message is prepared and trans- 
milted to the implantable device. 

[0405] The temporary basal rate is a basal rate that when 
programmed, will run in lieu of the basal profile rate. The 
temporary basal rate runs for the amount of time specified by 
the temporary basal duration. The CD software enables 
setting of the temporary basal rate using the set temporary 
basal rate screen. When the temporary basal rate and dura- 
tion are set, the CD software prepares and sends a set 
temporary basal rate message to the implantable device. 
When a temporary basal delivery is in progress, the CD 
software causes the remaining temporary basal rate duration 
to be displayed on the temporary basal rate screen. When 
there is no temporary basal rate delivery in progress, the CD 
software causes dashes to be displayed as the amount and 
duration of the temporary basal rate. When a temporary 
basal rate is set with a duration that is zero, any temporary 
basal rate in progress is canceled. When programming a 
temporary basal rate when a temporary basal rate is in 
progress, the CD software sets the default duration to the 
time remaining on the rate that is in progress rounded down 
to the nearest half-hour. The CD software increases the 
duration by one half-hour when the up key is pressed and 
decreases the amount by one half-hour when down key is 
pressed. The CD software locks out the set temporary basal 
rate screen during a diagnostic rate delivery and priming 
bolus delivery, 

[0406] The CD software maintains a log of personal 
events. The CD software allows personal events to be set 
from a personal events screen. The CD software updates the 
log with a time and event type after the user completes the 
personal event data entry sequence. The personal events 
screen is not displayed when a personal events enable 
parameter is set to OFF. When the personal events screen is 
displayed, the most recent personal event is displayed. When 
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the down key is pressed, the CD software displays the 
previous personal event in the log and when the Up key is 
pressed, the CD software displays the next personal event in 
the log. The CD software ignores presses of the Down key 
when the oldest personal event is being displayed and 
ignores the Up key when the newest personal event is being 
displayed. 

[0407] Automatic Off is set from the 'set automatic off' 
screen. When the automatic off duration is set the CD 
software prepares and sends a set automatic off telemetry 
message to the implantable device. When the automatic off 
interval is programmed to dashes, the CD software disables 
the feature. The CD software maintains a timer that indicates 
the amount of time remaining in the automatic off interval. 
When telemetry responses from the implantable device are 
received, and the response is not the interrogate response, 
the CD software resets the timer to the automatic off 
interval. The CD software decrements the time in the 
automatic off interval timer every minute. When the amount 
of time in the automatic off interval is five minutes (indi- 
cating that the Implantable Device will alarm in 5 minutes), 
the CD software reports an "automatic off alarm" alarm. 

[0408] The CD software maintains the time and the date. 
The CD software enables the time and the date to be set from 
the 'time and date* screen. When ACT is pressed, the 'set 
time* screen is displayed. When the 'set time* screen is 
displayed, the CD software allows the user to change the 
hours and the minutes. When act is pressed and the minutes 
are displayed, the CD software displays the set date screen. 
When the date and the time are set by the user, the CD 
software prepares and sends out a set current time telemetry 
message to the implantable device. In the present embodi- 
ment, though the external communication device has direct 
knowledge of date and changes in date that may occur, this 
direct knowledge is not used in determining, among other 
thing, how to set daily totals. In alternative embodiments, 
this direct knowledge may be used for this purpose; how- 
ever, in the present embodiment the following analysis is 
performed by the CD software and associated conclusions 
made: (1) If the new hour is less than the current hour 
(measured on a 24 hour clock), and the new hour subtracted 
from the current hour is greater than or equal to 12, new day 
processing takes place, (2) If the new hour is greater than the 
current hour and the current hour subtracted from the new 
hour is greater than or equal to 12, previous day processing 
takes place, and (3) If the new hour and current hour are not 
separated by more than 12 hours the day is considered to 
remain unchanged. When new day processing occurs, the 
CD software updates the daily totals as is normally carried 
out at midnight. When previous day processing occurs, the 
CD software moves the daily total data log pointer to the 
previous day and adds current daily total values to those of 
the previous day. 

[0409] An hourly maximum amount is provided for by the 
CD software. The hourly maximum is the amount of insulin 
that may be delivered with boluses in one hour. If a higher 
amount is programmed, the CD software reports an error. In 
the present embodiment, the hourly maximum amount is not 
a hard limit but one that may be bypassed if desired by the 
patient. In effect, the hourly maximum amount provides a 
warning to the patient so that the patient will not uninten- 
tionally deliver a large amount of insulin within a single 
60-minute period. In the present embodiment, after clearing 



the warning, a window of predefined length (e.g. 10 min- 
utes) is opened so that an additional bolus of up to the single 
bolus maximum amount (i.e. bolus maximum) may be 
delivered without triggering the hourly maximum amount 
error. In the present embodiment the hourly maximum 
amount is set to a predetermined multiple of the single bolus 
maximum amount (e.g. 2.5 times). In alternative embodi- 
ments, the time period of the maximum may be specified to 
a larger or shorter amount and/or the amount of the maxi- 
mum may be set in a different way. 

[0410] Each time a bolus is programmed, the CD software 
computes the amount of bolus delivery that occurred during 
the previous 60 minutes. If the amount delivered summed 
with the programmed amount is greater than 2Vz times the 
bolus maximum, the CD software reports an "hourly maxi- 
mum exceeded" alarm and the CD software does not trans- 
mit a telemetry message to the implantable device to initiate 
the bolus. When the "hourly maximum exceeded" alarm is 
cleared the CD software sets a ten-minute time period in 
which CD software will not test for the "hourly maximum 
exceeded" alarm. The CD software resumes testing for the 
"hourly maximum exceeded" alarm after the ten-minute 
time period elapses. 

[0411] In other alternative embodiments, instead of basing 
the Hourly Maximum testing on amounts actually delivered 
in the last 60 minutes, the testing may be based on amounts 
programmed during the last 60 minutes. Also in alternative 
embodiments, an estimated timing of delivery for the 
amount(s) programmed may be factored into the calcula- 
tions before concluding that the hourly maximum will 
actually be exceeded, especially when the amount pro- 
grammed for delivery includes an extended bolus. 

[0412] The CD software allows a basal rate maximum to 
be defined and then uses this maximum value in limiting the 
basal rates that can be programmed for delivery during any 
one period of time. In the present embodiment, the CD 
software inhibits the user from programming basal profiles 
or temporary basal rates that are greater than the value of the 
basal rate maximum. When the basal rate maximum is 
changed, the CD software prepares and sends the implant- 
able device a set maximums Message. The CD software 
inhibits a maximum basal rale from being programmed that 
is set to a value lower than a programmed basal rate, 
including profile basal rates, both active and inactive, and 
the temporary basal rate. 

[0413] The CD software sets the medication remaining 
parameter to the refill amount when a response to a "set refill 
amount and alarm thresholds" message is received. The CD 
software subtracts the daily total values (not taken from the 
amounts displayed but instead derived from the number of 
pump strokes executed) from the "remaining medication" 
parameter once per day at midnight. 

[0414] The CD software performs a self -test and initiates 
the implantable device self -test through telemetry. The 
external communication device self-test is initiated from the 
external communication device self -test screen. When the 
external communication device self -test is initiated, the CD 
software sends an Initiate Self-Test telemetry message to the 
implantable device so that it may be tested as well. When the 
CD software receives a valid response to the initiate self-test 
telemetry message, the CD software indicates to the user that 
the Implantable Device has passed the self-test. If the 
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external communication device does not receive a response 
to the initiate self-test telemetry message, the CD software 
indicates that the implantable device has failed the self-test. 
The external communication device sends the implantable 
device a read self-test status message when the external 
communication device wants to know the results of the test. 

[0415] When the external communication device self-test 
is initiated, the CD software displays the 'screen operation 
verification' screen, an alert tone is emitted, the vibrator is 
enabled for a predefined period of time (e.g. 3 seconds), the 
CD software computes a CRC of the code area in internal 
RAM and compares the computed value to the CRC stored 
in the SEEPROM, the CD software computes a CRC of the 
code area in external RAM and compares the computed 
value to the CRC stored in the SEEPROM, and the CD 
software illuminates the Backlight for a predefined period of 
time (e.g. four seconds). If either of these CRC comparisons 
do not produce a match, the CD software causes the external 
communication device to reset. When the CD software has 
completed the self-test sequence, the CD software indicates 
that the external communication device has passed the 
self- test (assuming it has). It is up to the user to confirm 
whether the vibrator operated and whether the display was 
illuminated. In other embodiments, appropriate transducers 
and circuitry may be used to automatically ascertain the 
functionality of various components such as those noted 
above. 

[0416] The external communication device alarm type is 
set from the alarms screen, in conjunction with the audio 
feedback mode, audio and vibration alarms are set by the 
'alarms 1 screen. When the 'alarms' screen is displayed and 
the act key is pressed, the CD software displays the external 
communication device alarm type screen. When the alarm 
type screen is displayed and the act key is pressed, the CD 
software displays the 'audio feedback mode' screen. 

[0417] The CD software stores the alarm type parameter in 
the external communication device memory but when the 
parameter is changed, it also transmits a set external com- 
munication device data block message (containing the 
updated alarm type parameter) to the implantable device for 
storage in the external communication device data block. 

[0418] The CD software allows the audio feedback mode 
to be set from the . alarms screen, in conjunction with the 
external communication device alarm type. Audio feedback 
mode is enabled and disabled from the set audio feedback 
mode screen. When the audio feedback status parameter is 
set to ON the CD software sends the implantable device the 
set audio feedback mode message enabling audio feedback 
mode. When the audio feedback status parameter is set to 
OFF the CD software sends the implantable device the set 
audio feedback mode telemetry message disabling audio 
feedback mode. 

[0419] The CD software causes the external communica- 
tion device to storage mode if there is no keyboard activity 
and there have been no telemetry packets received for seven 
days. The external communication device exits storage 
mode if a key is pressed or the batteries are removed and 
replaced. When the external communication device is in 
storage mode, the screen is disabled and the telemetry 
hardware is disabled, time is maintained (but not displayed) 
and memory is retained but all other functions become 
unavailable. 



[0420] The pump refill process is initiated from the 'pump 
refill' screen, pressing act on the pump refill screen causes 
the 'set extracted amount' screen to be displayed. Pressing 
ACT on the 'set extracted amount' screen causes the 'set 
refill amount' screen to be displayed. Pressing act on the 'set 
refill amount' screen causes the 'Set Concentration' screen to 
be displayed. Pressing ACT on the 'set concentration' screen 
initiates the CD software to calculate the delivery accuracy. 
When the CD software computes the delivery accuracy to be 
a negative number, it displays the value as positive number 
along with the words "Under- Delivery". When the cd soft- 
ware computes the delivery accuracy to be a positive num- 
ber, the value is displayed along with the words "over- 
delivery". When the extracted amount is dashes, the 
extracted amount is logged as zero and this event is logged 
in the system event log. The accuracy is displayed as dashes. 
When the CD software determines that the extracted amount 
is more than the previous refill amount, the CD software logs 
a system event and displays the accuracy as dashes. When 
the CD software determines that the extracted amount equals 
the previous refill amount, the CD software logs a system 
event and displays the accuracy as dashes. 

[0421] Changing the insulin concentration is part of the 
refill screen sequence. When insulin concentration is 
changed on the 'set concentration' screen, the CD software 
resets all profile basal rates and the temporary basal rate to 
factory default values.^When the basal profiles are cleared, 
the CD software sends the implantable device a set basal 
rates message and a set insulin concentration message. 
When the insulin concentration is changed, the CD software 
recomputes the current basal rate maximum and bolus 
maximum and sends the implantable device a set maximums 
message. 

[0422] The priming bolus screen is found on the supervi- 
sor menu. The CD software locks out the priming bolus 
screen unless the pump is in stop mode. Priming the pump 
is initiated from the priming bolus screen. When the user 
presses the act key on the 'priming bolus' screen, the CD 
software displays the confirm priming bolus screen. When 
the user selects 'yes' and presses the act key on the 'confirm 
priming bolus 1 screen, the CD software displays the recon- 
firm priming bolus screen. When the user presses the ACT 
key on the 'reconfirm priming bolus' screen, the cd software 
sends a set delivery mode message to the implantable device 
with the mode set to indicate priming bolus, and the priming 
bolus amount set to a predefined value (such as 650 pump 
strokes). 

[0423] The diagnostic rate screen is on the supervisor 
menu. It is used to perform diagnostic procedures on the 
pumping mechanism by setting very high rates. Normally, 
the reservoir is not filled with insulin when this feature is 
used. The diagnostic rate screen is locked out unless the 
pump is in stop mode. Diagnostic rate is initiated on the 
'diagnostic rate' screen. When the user presses the act key on 
the 'diagnostic rate' screen, the CD software displays the set 
diagnostic rate Screen. When the user presses the act key on 
the set diagnostic rate screen, the cd software displays the 
confirm diagnostic rate screen. When the user selects 'yes' 
and presses the act key on the confirm diagnostic rate screen, 
the CD software displays the reconfirm diagnostic rate 
screen. When the user presses the act key on the reconfirm 
diagnostic rate screen, the CD software prepares and sends 
a set delivery mode message to the implantable device with 
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the mode set to indicate diagnostic rate, and the diagnostic 
rate amount equal to the amount set on the 'set diagnostic 
rate' screen. While the diagnostic rate is in progress, the CD 
software displays a message on the 'time and message* 
screen to indicate that the diagnostic rate is in progress. 

[0424] The maximum lock feature is a safety feature 
accessible from the supervisor menu. This feature enables 
and disables the patient's ability to change the delivery 
maximums. The maximum lock feature is accessible on the 
Mock bolus and basal maximums' screen. When the user 
presses act from this screen, the set lock screen is displayed. 
When the user presses act on the set lock screen, the CD 
software sends a set maximums message to the implantable 
device. When the locked maximum status parameter is on, 
the CD software ignores the act key when it is pressed while 
the max bolus screen is displayed. When the locked maxi- 
mum status parameter is on, the CD software ignores the act 
key when it is pressed while the max basal rate screen is 
displayed. 

[0425] The read implantable device data feature synchro- 
nizes the external communication device and the implant- 
able device. The read implantable device data feature is 
accessible from the read implantable device data screen. 
When the user presses act on this screen, the CD software 
initiates the read implantable device data process. The read 
implantable device data process includes reading the 
Implantable device data log pointers and reading all of the 
data necessary to make the data logs in the external com- 
munication device mirror the data logs in the implantable 
device. 

[0426] Setting the personal ID is initiated on the personal 
ID screen. When act is pressed on the personal ID screen, the 
CD software displays the "set personal id character 1" 
screen. As there are 32 characters available for use as the 
personal ID in this embodiment, 32 screens are supplied for 
entry of the personal ID. When ACT is pressed on the final 
character of the personal ID, the CD software sends a "set 
personal id message" to the implantable device. 

[0427] The external communication device contains an 
image of the implantable device software in one of its 
SEEPROMs. The image includes instructions to perform all 
of the telemetry transactions necessary to download the 
software, including for example, an interrogate message, a 
link message, a reset message, an interrogate message, a link 
message, download start message & data, one or more 
download continue messages and data, and a bootstrap 
message. The SEEPROM includes code and data for both 
the main and the monitor processors on the implantable 
device. Downloading implantable device software is initi- 
ated on the "download implantable device software" screen. 
When the user presses the act key on the "download implant- 
able device software" screen, the CD software displays the 
"confirm download implantable device software" screen. 
When the user selects 'yes' and presses the act key on this 
screen, the CD software displays the re-confirm download 
implantable device software screen. When the user presses 
the ACT key on this screen, the CD software initiates the 
software download. The CD software reads the SEEPROM 
and uses the size and the data, in formulating telemetry 
packets to send to the implantable device. If appropriate 
message responses are received by the CD software, it 
continues sending packets until the data read from the 



SEEPROM indicates that there is no more data. If errors arc 
detected during the download process, the CD software 
displays the download error screen. 

[0428] Stop mode is a mode where the implantable device 
is programmed to stop all insulin delivery. The CD software 
limits accessibility to only supervisor menu screens when 
the pump is in stop mode. Stop mode is enabled from the 
"stop pump" screen. When stop mode is entered, the CD 
software prepares and transmits a telemetry message to the 
implantable device to set the delivery mode to stop mode. 
When stop mode is entered, the CD software displays the 
alarm screen with "pump stopped" alarm active. When the 
"pump stopped" alarm condition is cleared, the CD software 
sets prepares and sends a telemetry message to the implant- 
able device to set the delivery mode to normal mode and also 
updates the bolus history log to indicate the amount of the 
latest bolus that was delivered. 

[0429] The CD software provides single command ability 
to set parameter values in the implantable device to their 
factory default values. This capability is produced from the 
"initialize to factory defaults" screen. Several telemetry 
commands are used to initialize the implantable device to 
factory defaults successfully When the choice is confirmed 
to reset the parameters, the CD software sends the telemetry 
messages indicated in the following table to the implantable 
device to set the parameters to their factory default values: 



Telemetry Messages to Initialize to Factory Defaults 

Set Current Time 
Set Automatic Off 

Set External Communication Device Data Block 

Set Maximums 

Set Audio Feedback Mode 

Set Personal ID 

Set Temp Basal Rate 

Set Basal Profile Rates 

Set Delivery Mode 



[0430] The CD software provides a one command process 
for initializing the external communication device to 
implantable device. After completing this sequence, the 
external communication device is configured to match the 
implantable device settings with the exception of the basal 
profiles which are set to factory defaults in the implantable 
device and the external communication device. The Initial- 
ize external communication device to implantable device 
process is initiated from the initialize external communica- 
tion device to implantable device screen. When the ACT key 
is pressed and the 'initialize external communication device 
to implantable device' screen is being displayed, the CD 
software sends the implantable device an interrogate mes- 
sage. When the response to the interrogate telemetry mes- 
sage is received, the CD software displays the * confirm 
implantable device serial number' Screen. This screen con- 
tains a message that gives the user the choice to confirm or 
reject the displayed personal ID. The user may choose "yes" 
or "no" to confirm or reject and abort the initialization 
process. The CD software sets the "no" choice as the default. 
When the 'no* choice is confirmed, the external communi- 
cation device attempts to add the telemetry ID from the 
interrogate response message to the exclusion list. If the 
exclusion list is full, the CD software reports an "exclusion 
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list full" alarm. If the exclusion list is not full, the CD 
software sends out another interrogate message, in hopes of 
getting the correct implantable device to respond. The 
rejection process may be repeated multiple times if a large 
number of implantable devices are in the vicinity. When the 
'yes' choice is confirmed, the CD software sends the telem- 
etry messages to the implantable device as indicated in the 
table below. 



Telemetry Messages to Initialize the External Communication Device 
to Implantable Device 

Interrogate 

Link External Communication Device to Implantable Device 

Read Stroke Volume 

Read Lifetime Total Delivered 

Read Audio Feedback Mode 

Read Insulin Concentration 

Read Automatic Off 

Read Implantable Device Data Log Pointers 
Read Refill Counter 
Read Maximums 

Read External Communication Device Data Block 

Read Memory 

Set Temp Basal Rate 

Set Basal Profile Rates 

Set Delivery Mode 



[0431] The stroke volume received in the read stroke 
volume response is range-checked by the CD software to 
ensure that it is a valid value. If the stroke volume is not 
within range, and "invalid stroke volume" alarm is reported, 
and the CD software will not initialize the external commu- 
nication device to the implantable device. If valid, the CD 
software stores the stroke volume as received and once more 
in its complimented form. 

[0432] The insulin concentration received in the read 
concentration response is also range checked by the CD 
software to ensure that it is a valid value. If the insulin 
concentration is not within the range, the CD software 
reports an "invalid stroke volume" alarm and the CD soft- 
ware will not initialize the external communication device to 
the implantable device. If valid, the CD software stores the 
insulin concentration as received and once more in its 
complimented form. 

[0433] With the set delivery mode message, the CD soft- 
ware sets the delivery mode to suspend. With the set 
temporary basal rate and the set basal profile rates messages, 
the CD software sets the implantable device basal rates, 
including the profiles and temp basal rates to the factory 
default values. 

[0434] During programming of the external communica- 
tion device, if there is no active alarm and no buttons are 
pressed, the external communication device will return to 
the 'time and message* screen after a predefined period of 
inactivity. When an alarm is in the process of being cleared, 
the CD software returns the external communication device 
to the "time and alarm" screen. The time-out (i.e. predefined 
period of inactivity) is dependent upon the last key that was 
pressed, if telemetry occurred, and if an alarm was beeping. 
In the present embodiment, several different time out periods 
are used: (1) The time-out is 4 seconds after telemetry 
occurs; (2) 15 seconds after an interrogate; (3) 15 seconds 
after audio bolus beeping; (4) 7 seconds after a sel key is 



pressed; (5) 15 seconds after all other keys are pressed, 
except for when the down key is pressed to activate the 
backlight; and (6) 4 seconds after the activation of the 
backlight. 

[0435] The CD software provides a set of functions that 
are only accessible with a supervisor password. In order for 
the user to access the supervisor menu, the user must enter 
a supervisor password on the password screen. When a 
predefined group of keys are pressed simultaneously (e.g. 
the two arrow keys), for a predefined number of seconds 
(e.g. 3-5 seconds), from one or more selected screens (e.g. 
the time alarm & sel screen, or the pump setup screen) the 
password screen is displayed. When the user is presented 
with the password screen, the user enters a selected number 
of parameters (e.g. four parameters defined as password 
entry 1, password entry 2, password entry 3, and password 
entry 4). The CD software presents one parameter at a time 
for entry. When the act key is pressed, subsequent password 
entry parameters may be entered. When "act" is pressed 
after specifying password entry 4, the CD software com- 
pares password entry 1-4 parameters to password 1-4 param- 
eters. If the four values match, the CD software displays the 
'supervisor menu' screen. If the values do not match, the CD 
software compares password entry 1-4 parameters to the 
factory password parameters 1-4. If the four values are 
within a predefined amount of each other (e.g. less than or 
equal to 24 apart), the CD software displays the supervisor 
menu screen. If the values do not match, the CD software 
displays the time and message screen. The following tables 
present a listing of the various screen names along with a 
brief description of them. 



Screen Description 

Main Menu Screens 

Time This is the screen that displays the current time and the 

icons. 

Time and This screen will be displayed when there are 

Message messages such as bolus delivery in progress and temporary 

basal rate in progress. 
Bolus This is the screen that shows the boluses that have been 

History delivered. A new bolus may be started from this screen. 

Suspend This is the screen where the user can stop (clinically 
Pump speaking) insulin delivery. 

Basal Rate This is the screen where the basal profiles may be reviewed 
and programmed. 

Temporary This is the screen where a temporary basal rate may be 
Basal Rate programmed or canceled. 

Personal This screen is where the user can record the incidence 
Events of events such as exercise and meals for later review. Note 

(when that this screen will not be in the Main Menu unless it is 

enabled) enabled in the Setup II menu. 
History This is a menu (described below) that shows historical 
Menu insulin delivery information. 

Pump Setup This is the menu where the pump setup options are located. 
The History Menu contains the following screens: 
History Menu Screens 

Read This screen is where the user can Synchronize the 

Implantable Implantable Device data and the external communication 
Device Data device data. 

Medication This screen shows how much medication is remaining in 
Remaining the pump reservoir. 

Daily Totals This screen shows the total amount of insulin delivered for 

the most recent 90 days. 
Exit History This screen exits the History Menu and returns to the Main 

Menu, 
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-continued 



-continued 



Screen 



Description 



Screen 



This screen shows the external communication device Event 
Log entries. 



This screen shows the Implantable Device Event Log 
entries. 



This screen shows the Implantable Device Battery Voltage 
Ijog entries. 



External 
Communica- 
tion Device 
Clinical 
History 
Implantable 
Device 
Clinical 
History 
Implantable 
Device 
Voltage 
History 

The Pump Setup Menu contains the following screens: 
Pump Setup Menu Screens 



Time and 
Date 

Automatic 
Off 

Alarms 



Self-Test 

Basal 
Delivery 
Pattern 
Initialize 
External 
Communica- 
tion Device 
to [mplant 
Pump 
Setup II 
Exit Setup 



This is the screen where the user sets the time and the date. 

This is the screen where the user sets and clears the 
automatic off duration. 

This is the screen where the user sets the alarm type (audio 
high, audio low, or vibrator) and where the user sets audio 
feed back mode. 

This is the screen where the user initiates a self- test for the 
external communication device and the Implantable Device. 
This is the screen where one of the three basal profile 
delivery patterns is selected. 

This is where the external communication device and the 
Implantable Device are "married". This must be carried out 
before an external communication device and an 
Implantable Device can communicate. 

This is where the Pump II menu can be entered. 

This screen exits the Pump Setup Menu and returns to the 
Main Menu. 

The Pump Setup II Menu contains the following screens: 
Pump Setup II Menu Screens 



Audio Bolus This is where the audio bolus feature is enabled and 
disabled. 

This is where the ability to choose a bolus type on the bolus 
setting screen is enabled and disabled. 
This is where the maximum bolus amount is set 



This is where the maximum basal rate is set. 



Variable 
Bolus 
Maximum 
Bolus 
Maximum 
Basal Rate 

Time display This is where the time display can be set to either 12-hour 
format or 24-hour clock. 

Personal This is where the personal events feature is enabled and 
Events disabled. 

Exit to Pump This screen exits Pump Setup II and enters Pump Setup I 
Setup 
Exit Setup 



This screen exits the Pump Setup II menu and returns to the 
Main Menu. 

The Supervisor Menu contains the following screens: 
Supervisor Menu Screens 

Refill This is where the user enters the amount of medication put 

into the pump. This is used for the low and empty reservoir 
alarms. 

This is where a priming bolus that is designed to remove air 
from the catheter is programmed. 
This where the diagnostic rate is programmed. 



Priming 
Bolus 
Diagnostic 
Rate 
Bolus and 
Basal 
Maximum 
Lock 

Personal ID 
Initialize to 
Factory 
Defaults 



This is where the ability for the user to change maximums 
in the Pump Setup II Menu is enabled and disabled. 



This is where the 32 character personal ID is set. 
This feature programs pump parameters to the factory 
defaults. 



Description 



Download 
Pump 
Software. 
Stop Pump 
Set 

Supervisor 

Password 

Exit 

Supervisor 
Menu 



This is where the pump software can be downloaded. 



This feature stops and resumes all pumping. 

This is where the password for the Supervisor Menu is set. 



This screen exits the Supervisor Menu and returns to the 
Main Menu. 



[0436] Any field that is displayed and that may be changed 
over the product lifetime is identified as a parameter field. To 
clarify parameter definition, parameters can be thought of as 
being subdivided into numeric parameters and option 
parameters. The numeric parameter will generally be a 
number. The definition for numeric parameters includes a 
minimum value and a maximum value and a unit of how the 
parameter is measured. For all parameters, the defaults 
values are shown. Numeric parameters also include a step 
value that indicates how scrolling will increment and dec- 
rement when the parameter can be changed by the user. 
Numeric parameters may show dashes when they are dis- 
abled. This is indicated by the term 'dashes'. Option param- 
eters will generally be a set of options that the user scrolls 
through when the parameter is set. Option Parameters are 
shown with all the available choices and the default. 

[0437] The factory default is the value or option that the 
parameter will be set to when the external communication 
device is shipped from the factory as a new product. The 
operating default is the value or option that the parameter 
will be set to when the external communication device has 
been initialized properly to an Implantable Device, and the 
user has interacted with the parameter; 



PART 1 - External Communication Device Parameter Summary 
Factory Delta 



Parameter 


Default 


Operating Default 


Units 


\felue 


Accuracy 




"%" will be 






Status 




displayed, "Under 
Delivery" will be 
displayed if 
Delivery Accuracy 
is negative; 
otherwise "Over 
Delivery" will be 
displayed. 






Audio 


0.4 


Previously 


Units 


0.4 


Bolus 




programmed value. 






Increment 










Audio 


OFF 


Previously 






Bolus 




programmed value. 






Status 










Audio 


OFF 


Previously 






Feedback 




programmed value. 






Status 










Auto-Off 


DISABLED 


Previously 


Hours 


1 


Duration 




programmed value. 






Basal Rate 






Units 




Total 
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•continued 



-continued 



PART 1 - External Communication Device Parameter Summary 



Factory 
Parameter Default 



Operating Default Units 



Delta 
Value 



Bolus 

Amount 

Bolus 

Delivery 

Type 

Bolus 

Status 



Dashes Last Bolus Amount Units 

NORMAL NORMAL 



Blank. 



Bolus 
Time & 
Date 



Dashes 



Daily 
Total 
Basal 
Amount 
Daily 
Total 
Bolus 
Amount 
Daily 
Total Date 
Day 1 

Delivery 
Accuracy 



Dashes 



Dashes 



Dashes 



Current 
Time & 
Date 
MEAL 



Delivery A 
Pattern 

Diagnostic 10 
Rate 
Event 
Time & 
Date 
Event 
Type 

Extended Dashes 

Bolus 

Amount 

Extended 30 minutes 

Bolus 

Duration 

Extracted 0.1 

Amount 

Factory Operating 
Password Default 
1-4 



Dependent upon 
pump status. The 
text PRO- 
GRAMMED will be 
displayed at any 
time the bolus 
on the screen has 
not been confirmed 
as being delivered. 
If the bolus has been 
delivered this 
section of screen 
will be blank. 

Time & Date of last dependent on 



bolus 



Previously 
programmed value. 



Previously 
programmed value. 



Time Format 
and Date 
Format 
parameter 
settings. 
Units 



Units 



Previously Month and 

programmed value. Day 

Previously 

programmed value. 

[100 x (Estimated Percent 

Delivery - Amount 

De 1 ivered)/Amount 

Delivered], where 

Amount Delivered 

is [Previous Refill 

Amount - Extracted 

Amount] and 

Estimated Delivery 

is ((1.04 g/mL) x 

Units Delivered/ 

Insulin 

Concentration) 
Previously 
programmed value, 
10 



1 day 



Current Time & 
Date 



MEAL 



30 minutes 



0.1 



Units/hour 

Dependent on 
Time Format 



Hours :minutes 30 

minutes 



Grams 



0.1 



(24 • Month * 32 + 
24 * Day + Hour) 
(Note that January is 
0, February is 1, 
etc) 



PART 1 - External Communication Device Parameter Summary 



Factory 
Parameter Default 



Operating Default Units 



Delta 
Value 



Hour 



Immediate 
Bolus 
Amount 
Insulin 
Concen- 
tration 
Implanta- 
ble Device from 



U-400 



2-bytc 



Telemetry 



OFF 



SW 
version 
Locked 
Maxi- 
mums 
Status 

Maximum 0.2 
Basal Rate 
Maximum 10 
Bolus 

Medica- 0 
tion 

Remaining 

Minutes 0 minutes 



Month 

Password 
Character 
1 

Password 
Character 
2 

Password 
Character 
3 

Password 
Character 
4 

Character 

Password 

Entry 

Character 

1-4 

Personal 

Event 

Status 

Personal 

ID 

Character 

1-32 

ECD 

Alarm 

Type 

CD 

software 
Version 
Priming 
Bolus 



Profile 
Basal Rate 
Amount 



JAN 



OFF 



Dependent on 1 hour 
Time Format 
parameter 
setting. 

Units 0.2 



Previously 
programmed value. 



Dashes 



Previously 
programmed value. 

2-byte from 
Telemetry 



Previously 
programmed value. 



Previously Units/hour 0.1 
programmed value. 

Previously Units 0.2 
programmed value. 

Previously Units 
programmed value. 

Previously 
programmed value. 



2-byte 
stored 
value. 
[((Pump 
Volume) + 
(Catheter 
Volume)) x 
(Insulin 
Concen- 
tration)] 
Dashes 



Previously 
programmed value. 
Previously 
programmed value. 

Previously 
programmed value. 

Previously 
programmed value. 

Previously 
programmed value. 



Previously 
programmed value 

Previously 
programmed value. 



Previously 
programmed value. 

2-byte stored value. 



Dependent on 
Time Format 
parameter 
setting. 



[((Pump Volume) + Units 
(Catheter 

Volume)) x (Insulin 
Concentration)] 



Previously u/h 0.1 

programmed value. 
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-continued 



-continued 



PART 1 - External Communication Device Parameter Summary 



Parameter 


Factory 
Default 


Operating Default 


Units 


Delta 
Value 


Profile 


Previous 


Previously 


Dependent on 


30 


Basal Rate 


start time 


programmed value. 


Time Format 


minutes 


Start Time 


plus 30 




parameter 






minutes 




setting. 




Refill 


0.1 


0.1 


Grams 


0.1 


Amount 










Tem- 


Dashes 


Dashes 


units/hour 


0.1 


porary 










Basal Rate 










Amount 










Tem- 


Dashes 


Dashes 


Hours:minutes 


30 


porary 








minutes 


Basal Rate 










Duration 











PART 1 - External Communication Device Parameter Summary 



Factory 
Parameter Default 



Operating Default Units 



Time 
Format 

Variable OFF 
Bolus 
Status 

Year 2000 



12 HOUR Previously 

programmed value. 
Previously 
programmed value. 

Previously 
programmed value. 



[0438] 



Delta 
Value 



1 year 



PART 2 - External Communication Device Parameter Summary 





Interface 


Interface 




Number of 


Parameter 


Minimum 


Maximum 


Options 


Records 


Accuracy Status 










Audio Bolus Increment 


0.4 


0.8 






Audio Bolus Status 






ON or OFF 




Audio Feedback Status 






ON or OFF 




Auto-Off Duration 


DISABLED 
and then 1 


16 






Basal Rate Total 










Bolus Amount 








512 


Bolus Delivery Type 






NORMAL, DUAL, OR 








SQUARE 




Bolus Status 










Bolus Time & Date 








512 


Daily Total Basal Amount 








120 


Daily Total Bolus Amount 








120 


Daily Total Date 








120 


Day 


1 


31 






Delivery Accuracy 


0 


100 






Delivery Pattern 






A, B, or C 




Diagnostic Rate 


10 


240 for U-400, 
300 for U-500 






Event Time & Date 








512 


Event Type 






MEAL, SNACK, SICK, 


512 






EXERCISE, A, B, C. 




Extended Bolus Amount 


Dashes and 
then 0.2 U 


Dependent on 
Maximum Bolus 
parameter 






Extended Bolus Duration 


30 minutes 


4 hours 






Extracted Amount 


Dashes and 
then 0.1 U 


25 






Factory Password 1-4 










Hour 


0 


11:00 PM 






Immediate Bolus Amount 


Dashes and 
then 0.2 U 


Dependent on 
Maximum Bolus 
parameter 






Insulin Concentration 






U-400, or U-500 




Implantable Device SW 










version 










Locked Maximums 






ON or OFF 




Status 










Maximum Basal Rate 


0.2 


35 






Maximum Bolus 


0 


25 






Medication Remaining 










Minutes 


0 minutes 


59 minutes 






Month 






JAN, FEB, MAR, 





APR, MAY, JUN, 
JUL, AUG, SEP, 
OCT, NOV, DEC 
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Interface 


Interface 


Number of 


Parameter 


Minimum 


Maximum 


Options Records 


Password Character 1 


number 0 


letter Z 




Password Character 2 


number 0 


letter Z 




Password Character 3 


number 0 


letter Z 




Password Character 4 


number 0 


letter Z 




Password Entry 


number 0 


letter Z 




Character 1-4 








Persona] Event Status 






ON or OFF 


Personal ID Character 


number 0 


letter Z 




1—32 








External Communication 






HIGH, LOW, or 


Device Alarm Type 






VIBRATE 


CD software Version 








Priming Bolus 








Profile Basal Rate 


Dashes and 


dependent on 


48 per Delivery 


Amount 


then 0.1 


Maximum Basal 
Rate parameter 


Pattern 


Profile Basal Rate Start 


previous start 


11:30PM 


48 per Delivery 


Time 


time plus 30 
minutes 
(except if it is 
Profile 1, 
which always 
starts at 
12:00 am) 




Pattern 


Refill Amount 


0.1 


25 




Temporary Basal Rate 


Dashes and 


Dependent on 




Amount 


then 0.1 


Maximum Basal 
Rate parameter 




Temporary Basal Rate 


Dashes and 


24 hours 




Duration 


then 30 
minutes 






Time Format 






12 HOUR or 
24 HOUR 


Variable Bolus Status 






ON or OFF 


Year 


1999 


2050 





[0439] The external communication device may use its 
IrDA port to communicate with other secondary external 
devices, such as a desktop personal computers. The external 
communication device may communicate with two classes 
of secondary devices: (1) devices for extracting information 
from the communication device for providing primarily 
health care related analysis for use by the patient or physi- 
cian, i.e. a clinician station, and (2) devices for extracting 
information from and writing information to the communi- 
cation device for system related diagnostics and problem 
solving, i.e. diagnostic station. 

[0440] The clinician station may be a desktop computer 
running a program designed to monitor and display diag- 
nostic information provided by the external communication 
device and an implantable device for a health care profes- 
sional. The clinician station type external device cannot 
write data to the external communication device or the 
implantable device. 

[0441] The diagnostic station may be a desktop computer 
running a program designed to aid in the diagnosis of system 
problems through communication with the implantable 
device and the external communication device. The diag- 
nostic station has the capability to write data to the implant- 
able device and to the external communication device. 

[0442] A full-duplex link between, the external commu- 
nication device and an second external device such as the 



clinician station is provided through the serial communica- 
tion port. This port provides transmit and receive lines that 
support infrared LEDs for establishing functional connec- 
tions to external devices. The transmit and receive lines also 
support RS232 connections to external devices. 

[0443] Messages are initiated by the second external 
device. The receiving device allows a predefined lime before 
concluding the transmission has ended. If this time is 
exceeded before a complete message is received, the receiv- 
ing device responds with a "no acknowledge" message. The 
receiver expects the next byte to be the first byte of a 
message. 

[0444] The external communication device maintains a 
low power state by disabling some of the UART circuitry. 
The second external device transmits a "wake-up" message 
in order to enable the external communication device 
receiver. When the external communication device is in the 
UART low power state and a byte is received, the external 
communication device enables all UART capabilities appro- 
priate for communication with an external device. When the 
external communication device UART is idle for 10 seconds 
it enters the low-power state. All messages except for a 
wake-up and listen message follow a format similar to that 
noted above for an RF telemetry message. 
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[0445] For safety reasons the external communication 
device recognizes two distinct communication channels 
using the IR port: the clinician channel and the diagnostic 
channel. The clinician station software uses a clinician 
channel to communicate to the external communication 
device. The messages that are available for each channel 
type are different. The clinician channel messages do not 
modify external communication device or implantable 
device memory but diagnostic channel messages can. A 
specific channel closes when the "channel close" message is 
received or when the interval between messages exceeds a 
predefined channel time out interval. Each channel is closed 
upon system start-up and remains closed a "channel open" 
message is received for that specific channel. 

[0446] While the above description has provided various 
teachings concerning how the communication device may 
handle various RF telemetry operations, IR communication 
operations, alarm notifications, and other functional activi- 
ties, many other such operations are definable. These other 
operations may be defined in manners that are analogous to 
the teachings presented above or in ways that are consistent 
with those teachings and do not lead to communication 
ambiguity or other potential mishandling of medical device 
operation. 

[0447] The above embodiment and its alternatives provide 
numerous enhancements in the electronic control of the 
medical device. These improvements provide more func- 
tional, reliable, safe, user friendly, convenience operation of 
an implantable medical device and more generically of an 
ambulatory medical device. 

[0448] While the above embodiment has primarily been 
concerned with an implantable infusion pump that dispenses 
insulin using a piston type (i.e. pulsatile) pump mechanism, 
the electronic control features disclosed herein may be used 
in other ambulatory devices such as implantable pacemak- 
ers, defibrillators, other implantable tissue stimulators, 
implantable physiologic sensors such as electrochemical 
oxygen sensors, peroxide sensors, or enzymatic sensors such 
as glucose sensors, externally carried infusion pumps, 
implantable infusion pumps that use other pumping mecha- 
nisms or simply used excess pressure and controlled flow 
elements to infuse various medications and drugs such as 
analgesics, drugs for treating AIDS, drugs for treating psy- 
chological disorders and the like. For example, the features 
presented above may be used with an external infusion 
pump that may or may not have a built in display and keypad 
but is equipped with a telemetry system that can commu- 
nicate with a physically separated communication device so 
that the pump need not be accessed in order to provide 
commands to it and receive data from it. 

[0449] In these various alternatives, the physical, elec- 
tronic, and programmed features of the communication 
device and implantable device may have different compo- 
nents and features than presented above for the implantable 
pump system so that their desired medical functionality and 
safety requirements are achieved and such that appropriate 
control and feedback is provided between the medical 
device and its communication device. 

[0450] In other alternative embodiments the medical 
device may include two medical devices such as an implant- 
able pump and an implantable sensor. The pump may 
dispense a drug whose physiological impact on the body 



(e.g. analgesic impact) is ascertained by the sensor or 
alternatively the sensor may supply a physiological reading 
that indicates a need for infusion of the drug. The pump may 
operate in a closed loop manner with the sensor or it may 
operate in an open loop manner where the patient is required 
to interpret sensor output information and is required to 
issue ^appropriate infusion commands to the pump. For 
example, in the case of a diabetic patient, the drug may be 
insulin and the sensor may detect glucose level. 

[0451] In other alternative embodiments two medical 
devices may be implanted adjacent one another or at an 
extended distance from one another. If not placed in physical 
contact with one another, a lead may be used to provide 
power conduction from one device to the other and also be 
used to conduct communication signals between the devices. 
Alternatively, each device may include at least one telemetry 
system that allows direct communication between each or 
allows indirect communication to occur via the external 
communication device or other external device. Each device 
may be supplied with its own power supply. Depending on 
the communication requirements each device may use two 
way communication (i.e. both outbound and inbound com- 
munication) or allow only one way communication (i.e. 
outbound communication, or possibly inbound communica- 
tion). 

[0452] In other alternatives, both the medical device and 
the communication device may be external devices (e.g. an 
external pump and an external RF telemetry based commu- 
nication device). In still further alternatives, a first type of 
medical device may be implanted (e.g. an infusion pump or 
a sensor) while a second medical device may be external 
(e.g. the opposite of a sensor or an infusion pump). Where 
at least one of the medical devices is external, it may also 
function as the communication device for the other medical 
device in which case it may possess a display for providing 
information to the patient and a keypad for allowing entry of 
commands for issuance to the implantable device as well as 
for direct use by itself. Even if at least one of the medical 
devices is external, it may be inconvenient to access that 
device when information is needed or commands must be 
given, as such an external, non-medical communication 
device may be supplied that has information output (e.g. 
display) capabilities and input (e.g. keypad) capabilities. If 
a separate communication device is provided, the external 
medical device may or may not have display and input 
capabilities. 

[0453] The telemetry features presented above may be 
used with various forms of distant communication (e.g. 
between the implantable device and other external devices 
or between the external communication device and other 
external devices). For example communication may occur 
via various electromagnetic links like IR, optical links, 
longer or shorter wavelength RF, audio links, ultrasonic 
links, acoustic links, inductive links, and the like. Various 
telemetry systems may be used. Telemetry systems may be 
of the analog type, digital type, or mixed. 

[0454] In other embodiments two independent processors 
may be used that operate from a single timing chain. In these 
alternatives, it is preferable that at least one of the timing 
signals (e.g. one of the lower frequency timers) be moni- 
tored by an independently timed watchdog circuit to reduce 
the risk of timing problems going undetected. 
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[0455] In still additional embodiments, an implantable 
glucose sensor may be used in conjunction with an implant- 
able insulin pump to provide feedback to the patient or 
physician on the effectiveness of the insulin delivery system. 
The patient could use the feedback to assist in making 
insulin delivery decisions in an open loop manner. Alterna- 
tively, the operation of the pump could be tied to the sensor 
output in a more or less closed loop manner to give a more 
automated character to system operation. Insulin may be 
infused without any user intervention, without pre-delivery 
information, and even without direct post delivery feedback. 
In a less automated closed loop system, drug infusion 
recommendations could be derived by the system and pre- 
sented to the user before delivery or the system could require 
user acknowledgment prior to proceeding with delivery for 
amounts or rates exceed a predefined limit. The implantable 
sensor may have its own power supply or may receive power 
from the control circuitry provided within the pump housing 
through a physical lead that connects them. Power may be 
supplied through one or more independent leads or alterna- 
tively may be transferred over one or more data lines 
through the communication signals themselves. Communi- 
cation may be exchanged in various ways including, for 
example, via galvanic leads, RF telemetry, fiber optics, and 
the like, and may be of digital, analog, or combined form. 
The sensor system may include a plurality of sensor ele- 
ments which might allow continued glucose data to be 
supplied even though some portion of the sensors stop 
operating, lose calibration or produce questionable readings. 
The most preferred sensors would include electronic pro- 
cessing capability in the form of an integrated circuit 
mounted in or forming a part of a housing for the sensor. 
This configuration has the advantage of allowing digital 
communications between the physical sensor and any sepa- 
rated electronic control module. 

[0456] Further teachings concerning implantable sensors 
and implantable sensor systems are found in a number of 
patents issued to D. A. Cough, including (1) U.S. Pat. No. 
4,484,987, entitled "Metliod And Membrane Applicable To 
Implantable Sensor"', (2) U.S. Pat. No. 4,627,906, entitled 
"Electrochemical Sensor Having Improved Stability"; (3) 
U.S. Pat. No. 4,671,288, entitled "Electrochemical Cell 
Sensor For Continuous Short-Term Use In Tissues And 
Blood"; (4) U.S. Pat. No. 4,703,756, entitled "Complete 
Glucose Monitoring System With An Implantable Teleme- 
tered Sensor Module"; and (5) U.S. Pat. No. 4,781,798, 
entitled "Transparent Multi-Oxygen Sensor Array And 
Method Of Using Same". Each of these patents is incorpo- 
rated herein by reference as if set forth in full. 

[0457] Still further teachings concerning implantable sen- 
sors and sensor systems are found in a number of patents 
issued to J. H. Schulman, et al., including (1) U.S. Pat. No. 
5,497,772, entitled "Glucose Monitoring System"; (2) U.S. 
Pat. No. 5,651,767, entitled "Replaceable Catheter System 
for Physiological Sensors, Stimulating Electrodes and/or 
Implantable Fluid Delivery Systems"; (3) U.S. Pat. No. 
5,750,926, entitled "Hermetically Sealed Electrical 
Feedthrough For Use With Implantable Electronic 
Device?'; (4) U.S. Pat. No. 6,043,437, entitled "Alumina 
Insulation for Coating Implantable Components and Other 
Microminiature Devices 1 '; (5) U.S. Pat. 6,088,608, entitled 
"Implantable Sensor and Integrity Test Therefor"; and (6) 
U.S. Pat. 6,119,028, entitled "Implantable Enzyme-Based 
Monitoring Systems Having Improved Longevity Due to 
Improved Exterior Surfaces" . Each of these patents is incor- 
porated herein by reference as if set forth in full. 



[0458] Additional further teachings concerning implant- 
able sensors and sensor systems are found in (1) U.S. Pat. 
No. 5,917,346, issued to J. C. Gord, et al., and entitled "Low 
power current-to-frequency converter"; (2) U.S. Pat. No. 

5.999.848, issued to J. C. Gord, and entitled "Daisy Chain- 
able Sensors for Implantation in Living Tissue"; (3) U.S. Pat. 

5.999.849, issued to L. D. Canfleld, et al., and entitled "Low 
Power Rectifier Circuit for Implantable Medical Devices"; 
and (4) U.S. Pat. No. 6,081,736, issued to M. S. Colvin, et 
al., and entitled "Implantable Enzyme-Based Monitoring 
Systems Adapted for Long Term Use"; Each of these patents 
is incorporated herein by reference as if set forth in full. 

[0459] Further teachings concerning implantable infusion 
pumps are found in a number of patents by R. E. Fischell, 
including (1) U.S. Pat. No. 4373,527, entitled "Implantable, 
Programmable Medication Infusion System"; (2) U.S. Pat. 
No. 4,494,950, entitled "Infusion Device Intended for 
Implantation in a Living Body"; (3) U.S. Pat, No. 4,525,165, 
entitled "Fluid Handling System for Medication Infusion 
System"; (4) U.S. Pat. No. 4,573,994, entitled "Refillable 
Medication Infusion Apparatus"; (5) U.S. Pat. No. 4,594, 
058, entitled "Single Valve Diaphragm Pump with 
Decreased Sensitivity to Ambient Conditions"; (6) U.S. Pat. 
No. 4,619,653, entitled "Apparatus For Detecting At Least 
One Predetermined Condition And Providing An Informa- 
tional Signal In Response Thereto In A Medication Infusion 
System"; (7) U.S. Pat. No. 4,661,097, entitled "Method for 
Clearing a Gas Bubble From a Positive Displacement Pump 
Contained Within a Fluid Dispensing System"; (8) U.S. Pat. 
No. 4,731,051, entitled "Programmable Control Means for 
Providing Safe and Controlled Medication Infusion"; and 
(9) U.S. Pat. No. 4,784,645, entitled, "Apparatus For 
Detecting A Condition Of A Medication Infusion System And 
Providing An Informational Signal In Response Thereto". 
Each of these patents is incorporated herein by reference as 
if set forth in full. 

[0460] Still further teachings concerning infusion pumps 
are found in a number of patents by Franetzki, including (1) 
U.S. Pat. No. 4,191,181, entitled "Apparatus For Infusion of 
Liquids", (2) U.S. Pat. No. 4,217,894, entitled "Apparatus 
for Supplying Medication to the Human or Animal Body"; 
(3) U.S. Pat. No. 4,270,532, entitled "Device for the Pre- 
programmable Infusion of Liquids"; (4) U.S. Pat. No. 4,282, 
872, entitled "Device for the P re-programmable Infusion of 
Liquids", U.S. Pat. No. 4,373,527, entitled "Implantable, 
Programmable Medication Infusion System"; (5) U.S. Pat. 
No. 4,511^55, entitled "Plural Module Medication Delivery 
System", (6) U.S. Pat. No. 4,559,037, entitled "Device for 
the Pre-programmable Infusion of Liquids"; (7) U.S. Pat. 
No. 4,776,842, entitled "Device for the Administration of 
Medications". Each of these patents is incorporated herein 
by reference as if set forth in full. 

[0461] Teachings concerning tissue stimulators are found 
in a number of patents by J. H. Schulman, including (1) U.S. 
Pat. No. 5,193,539, entitled "Implantable microstimulator"; 
(2) U.S. Pat. No. 5,193,540; entitled "Structure and Method 
of Manufacture of an Implantable Microstimulator"; and (3) 
U.S. Pat. No. 5,358,514, entitled "Implantable Microdevices 
with Self Attaching Electrodes". Further teachings are also 
found in (1) U.S. Pat. No. 5,957,958, by Loeb et al., entitled 
"Implantable nerve or muscle stimulator e.g. a cochlear 
prosthesis", in (2) U.S. Pat. No. 5,571,148, by G, E. Loeb, 
et al., entitled "Implantable Multichannel Stimulator"; and 
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in (3) PCT Publication No. WO 00/74751, by A. E. Mann, 
and entitled "Method and Apparatus for Infusing Liquids 
Using a Chemical Reaction in an Implanted Infusion 
Device". Each of these publications is incorporated herein 
by reference as if set forth in full. 

[0462] The control of an implantable sensor could be 
provided through the functionality of one or both Processor 
ICs. One Processor IC could supply power and/or control 
signals to the sensor(s) and receive data back from the 
sensor, while the other processor could monitor the activity 
to ensure that sensor activity meets certain predefined guide- 
lines. 

[0463] In other embodiments, the External Communica- 
tion Device of the first embodiment could be functionally 
linked to an external glucose sensor system such as the 
continuous glucose monitoring system (CGMS) offered by 
Minimed Inc. of Northridge, Calif. The link may be estab- 
lished, for example, through a physical lead or by RF 
telemetry. 

[0464] In other embodiments other implantable, or exter- 
nal, sensor systems that measure something other than 
glucose could also be functionally coupled to the implant- 
able device either to receive power and/or to provide data. 
Other such sensors might include oxygen sensors, peroxide 
sensors, pulse rate sensors, temperature sensors, accelerom- 
eters, and the like. 

[0465] In still other alternative embodiments, the elec- 
tronic control system of the first embodiment could be 
configured to control one or more implantable sensors or 
electrical stimulators with or without infusion functionality 
incorporated into the implantable device. 

[0466] Further embodiments will be apparent to those of 
skill in the art upon review of the disclosure provided herein. 
Still further embodiments may be derived from the teachings 
set forth explicitly herein in combination with the teachings 
found in the various patent applications. 

[0467] While the description herein sets forth particular 
embodiments, it is believed that those of skill in the art will 
recognize many variations to the presented embodiments 
based on the teachings herein, as such it is believed that 
many additional modifications may be made without depart- 
ing from the spirit of the teachings herein. The accompa- 
nying claims are intended to cover such modifications as 
would fall within the true scope and spirit of the present 
invention. The disclosed embodiments are therefore to be 
considered as illustrative and not necessarily restrictive, the 
scope of the invention being indicated by the appended 
claims, rather than the foregoing description, and all changes 
which come within the meaning and range of equivalency of 
the claims are therefore intended to be embraced therein. 

We claim, 

1. A medical system, comprising: 

a) an ambulatory medical device (MD) comprising MD 
electronic control circuitry that further comprises at 
least one MD telemetry system and at least one MD 
processor that controls, at least in part, operation of the 
MD telemetry system and operation of the medical 
device, wherein the medical device is configured to 
provide a treatment to a body of a patient or to monitor 
a selected state of the body; and 



b) a communication device (CD) comprising CD elec- 
tronic control circuitry that further comprises at least 
one CD telemetry system and at least one CD processor 
that controls, at least in part, operation of the CD 
telemetry system and operation of the communication 
device, wherein the CD telemetry system sends mes- 
sages to or receives messages from the MD telemetry 
system, 

wherein the medical device comprises an infusion pump, 
and 

wherein the CD display device is controlled to show a 
plurality of infusion parameters simultaneously. 

2. The system of claim 1 wherein a first portion of the MD 
telemetry system is incorporated into the MD processor and 
a second portion of the MD telemetry system is external to 
the MD processor, or wherein a first portion of the CD 
telemetry system is incorporated into the CD processor and 
a second portion of the CD telemetry system is external to 
the CD processor. 

3. The system of claim 2 wherein (1) the MD electronic 
control circuitry comprises at least one external MD func- 
tional module, other than the second portion of the MD 
telemetry system, that is external to the MD processor, (2) 
the CD electronic control circuitry comprises at least one 
external CD functional module, other than the second por- 
tion of the CD telemetry system, that is external to the CD 
processor, (3) the MD processor comprises an internal MD 
CPU and at least one other internal MD functional module, 
or (4) the CD processor comprises an internal CD CPU and 
at least one other internal CD functional module. 

4. The system of claim 1 wherein the medical device 
comprises at least one of (1) an implantable infusion pump 
for selectively dispensing a selected drug, (2) an implantable 
infusion pump for selectively dispensing insulin, (3) an 
implantable sensor for sensing a selected state of the body, 
(4) an implantable sensor for sensing glucose level, or (5) an 
implantable electrode for selectively stimulating a portion of 
the body of the patient. 

5. The system of claim 1 wherein the plurality of infusion 
parameters comprise at least two of parameters related to (1) 
an extended bolus, (2) an immediate bolus, or (3) a tempo- 
rary basal rate, amount and duration, or rate and duration, 
and immediate bolus amount, or rate and duration. 

6. A medical system, comprising: 

a) an ambulatory medical device (MD) comprising MD 
electronic control circuitry that further comprises at 
least one MD telemetry system and at least one MD 
processor that controls, at least in part, operation of the 
MD telemetry system and operation of the medical 
device, wherein the medical device is configured to 
provide a treatment to a body of a patient or to monitor 
a selected state of the body; and 

b) a communication device (CD) comprising CD elec- 
tronic control circuitry that further comprises at least 
one CD telemetry system and at least one CD processor 
that controls, at least in part, operation of the CD 
telemetry system and operation of the communication 
device, wherein the CD telemetry system sends mes- 
sages to or receives messages from the MD telemetry 
system, 
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wherein the communication device includes a CD display 
controlled by the at least one CD processor for provid- 
ing visual feedback to the patient, and 

wherein the feedback comprises a display of the quantity 
of a consumable estimated to be remaining in the 
system. 

7. The system of claim 6 wherein a first portion of the MD 
telemetry system is incorporated into the MD processor and 
a second portion of the MD telemetry system is external to 
the MD processor, or wherein a first portion of the CD 
telemetry system is incorporated into the CD processor and 
a second portion of the CD telemetry system is external to 
the CD processor. 

8. The system of claim 7 wherein (1) the MD electronic 
control circuitry comprises at least one external MD func- 
tional module, other than the second portion of the MD 
telemetry system, that is external to the MD processor, (2) 
the CD electronic control circuitry comprises at least one 
external CD functional module, other than the second por- 
tion of the CD telemetry system, that is external to the CD 
processor, (3) the MD processor comprises an internal MD 
CPU and at least one other internal MD functional module, 
or (4) the CD processor comprises an internal CD CPU and 
at least one other internal CD functional module. 

9. The system of claim 6 wherein the medical device 
comprises at least one of (1) an implantable infusion pump 
for selectively dispensing a selected drug, (2) an implantable 
infusion pump for selectively dispensing insulin, (3) an 
implantable sensor for sensing a selected state of the body, 
(4) an implantable sensor for sensing glucose level, or (5) an 
implantable electrode for selectively stimulating a portion of 
the body of the patient. 

10. The system of claim 6 wherein the consumable is a 
quantity of a drug estimated to be remaining in a reservoir. 

11. The system of claim 6 wherein the consumable is 
cither (1) battery power remaining in a replaceable CD 
battery in the communication device and a voltage level on 
the CD battery is graphically depicted with a desired reso- 
lution, or (2) battery power remaining in an MD battery in 
the medical device and a voltage level on the battery is 
graphically depicted with a desired resolution, 

12. A medical system, comprising; 

a) an ambulatory medical device (MD) comprising MD 
electronic control circuitry that further comprises at 
least one MD telemetry system and at least one MD 
processor that controls, at least in part, operation of the 
MD telemetry system and operation of the medical 
device, wherein the medical device is configured to 
provide a treatment to a body of a patient or to monitor 
a selected state of the body; and 



b) a communication device (CD) comprising CD elec- 
tronic control circuitry that further comprises at least 
one CD telemetry system and al least one CD processor 
that controls, at least in part, operation of the CD 
telemetry system and operation of the communication 
device, wherein the CD telemetry system sends mes- 
sages to or receives messages from the MD telemetry 
system, 

wherein the CD display is controlled to depict a plurality 
of patient programmable options and wherein at least 
one of the patient programmable options may be 
enabled or disabled such that when disabled the at least 
one patient programmable option is no longer displayed 
as an option. 

13. The system of claim 12 wherein a first portion of the 
MD telemetry system is incorporated into the MD processor 
and a second portion of the MD telemetry system is external 
to the MD processor, or wherein a first portion of the CD 
telemetry system is incorporated into the CD processor and 
a second portion of the CD telemetry system is external to 
the CD processor. 

14. The system of claim 13 wherein (1) the MD electronic 
control circuitry comprises at least one external MD func- 
tional module, other than the second portion of the MD 
telemetry system, that is external to the MD processor, (2) 
the CD electronic control circuitry comprises at least one 
external CD functional module, other than the second por- 
tion of the CD telemetry system, that is external to the CD 
processor, (3) the MD processor comprises an internal MD 
CPU and at least one other internal MD functional module, 
or (4) the CD processor comprises an internal CD CPU and 
at least one other internal CD functional module. 

15. The system of claim 12 wherein the medical device 
comprises at least one of (1) an implantable infusion pump 
for selectively dispensing a selected drug, (2) an implantable 
infusion pump for selectively dispensing insulin, (3) an 
implantable sensor for sensing a selected state of the body, 
(4) an implantable sensor for sensing glucose level, or (5) an 
implantable electrode for selectively stimulating a portion of 
the body of the patient. 

16. The system of claim 12 wherein the medical device 
comprises an infusion pump and wherein the at least one 
patient programmable option comprises at least one of (1) a 
square wave bolus option, (2) a patient specifiable maximum 
bolus amount, (3) a patient specifiable maximum basal rate 
option, or (4) a patient specifiable automatic off time inter- 
val. 

***** 
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